Cross-Site Scripting Vulnerability in SAP BusinessObjects BI Workspace

CVE-2025-23192

What is CVE-2025-23192?

SAP BusinessObjects Business Intelligence Workspace is susceptible to cross-site scripting due to a flaw that allows unauthenticated attackers to inject and store malicious scripts within a workspace. When user access occurs, these scripts execute in the victims' browsers, potentially exposing sensitive session information and disrupting user experience. This vulnerability raises significant concerns for confidentiality as attackers can manipulate user actions and access sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References