Sap: >> Business Intelligence Promotion Management Application Security Vulnerabilities
Cross-Site Scripting (XSS) vulnerability in SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, 4.30, as user controlled inputs are not sufficiently encoded.
CVSS Score
6.1
EPSS Score
0.01
Published
2017-12-12
SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentication checks for functionalities that require user identity.
CVSS Score
9.8
EPSS Score
0.025
Published
2017-12-12