JavaScript Injection Vulnerability in SAP BusinessObjects Business Intelligence

CVE-2026-27683

What is CVE-2026-27683?

The SAP BusinessObjects Business Intelligence application is susceptible to a JavaScript injection vulnerability, which allows an authenticated attacker to craft malicious URLs. When a victim clicks on the provided URL, the embedded script executes within their browser, potentially compromising user confidentiality by exposing restricted information. Although this vulnerability poses a minimal risk to the integrity and availability of the system, it highlights the necessity for robust security measures to mitigate such exploits.

References