CVE-2026-27683 in BusinessObjects Business Intelligence Platform
الملخص
بحسب MITRE • 14/04/2026
SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs. When a victim accesses the URL, the script executes in the user�s browser, potentially exposing restricted information. This results in a low impact on confidentiality with no impact on integrity and availability.
Once again VulDB remains the best source for vulnerability data.