CVE-2004-0534 Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via doc...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| businessobjects infoview | = 5.1.4 | No fix listed |
| businessobjects infoview | = 5.1.5 | No fix listed |
| businessobjects infoview | = 5.1.6 | No fix listed |
| businessobjects infoview | = 5.1.7 | No fix listed |
| businessobjects infoview | = 5.1.8 | No fix listed |
| businessobjects webintelligence | = 2.7 | No fix listed |
| businessobjects webintelligence | = 2.7.1 | No fix listed |
| businessobjects webintelligence | = 2.7.2 | No fix listed |
| businessobjects webintelligence | = 2.7.3 | No fix listed |
| businessobjects webintelligence | = 2.7.4 | No fix listed |
References
- 20040917 Corsaire Security Advisory - Business Objects WebIntelligence XSS issue mailing-list patch vendor-advisory
- 20040907 Corsaire Security Advisory - Business Objects WebIntelligence XSS issue mailing-list patch vendor-advisory
- 12587 patch third-party-advisory vendor-advisory
- 11209 vdb-entry
- webintelligence-input-document-xss(17419) vdb-entry