SAP Business Objects Platform Business Intelligence (BI Launchpad), version 4.2, ne pas suffisamment encodent entrées contrôlées par l’utilisateur, ce qui reflète dans Cross-Site Scripting.
https://launchpad.support.sap.com/#/notes/2917743
https://launchpad.support.sap.com/#/notes/2917743
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6281