Cross-Site Scripting Vulnerability in SAP BusinessObjects BI Workspace

CVE-2025-23192

What is CVE-2025-23192?

SAP BusinessObjects Business Intelligence Workspace is susceptible to cross-site scripting due to a flaw that allows unauthenticated attackers to inject and store malicious scripts within a workspace. When user access occurs, these scripts execute in the victims' browsers, potentially exposing sensitive session information and disrupting user experience. This vulnerability raises significant concerns for confidentiality as attackers can manipulate user actions and access sensitive data.

References