PT-2026-32561 · Sap Se · Sap Businessobjects Business Intelligence Platform

Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-27683

NVD

CVSS v3.1

4.1

Medium

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs. When a victim accesses the URL, the script executes in the user�s browser, potentially exposing restricted information. This results in a low impact on confidentiality with no impact on integrity and availability.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-27683

Affected Products

Sap Businessobjects Business Intelligence Platform

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-27683 · Security Note
• https://twitter.com/VulmonFeeds/status/2044023981624230157 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/2043976160535552501 · Twitter Post
• https://me.sap.com/notes/3698216 · Note
• https://twitter.com/CVEarity/status/2044059393218752764 · Twitter Post