description: SAP BusinessObjects Business Intelligence platform (Analysis for OLAP) - versions 420, 430, allows an authenticated attacker to send user-controlled inputs when OLAP connections are created and edited in the Central Management Console. On successful exploitation, there could be a limited impact on confidentiality and integrity of the application.
problem types: CWE-79
affected:
{
defaultStatus: unaffected
product: SAP BusinessObjects Business Intelligence platform (Analysis for OLAP)
vendor: SAP SE
versions:
status: affected, version: 420
status: affected, version: 430
}