PT-2026-32561 · Sap · Sap Businessobjects Business Intelligence

Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-27683

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence (affected versions not specified)

Description An authenticated attacker can inject malicious JavaScript payloads through crafted URLs. When a victim accesses the URL, the script executes in the user's browser, which may expose restricted information. This is a stored cross-site scripting issue, where malicious scripts are permanently stored on the target server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-27683

Affected Products

Sap Businessobjects Business Intelligence

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-27683 · Security Note
• https://twitter.com/CVEnew/status/2043976160535552501 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044023981624230157 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://me.sap.com/notes/3698216 · Note
• https://twitter.com/CVEarity/status/2044059393218752764 · Twitter Post