Vulnerability-Lookup

CNVD-2021-03700

Vulnerability from cnvd - Published: 2021-01-18

Title

SAP BusinessObjects Business Intelligence Platform跨站脚本漏洞（CNVD-2021-03700）

Description

SAP BusinessObjects Business Intelligence Platform是德国思爱普（SAP）公司的一款完备的商务分析平台。该平台集市场领先的 SAP 数据整合产品、数据管理产品和商务智能 (BI) 产品于一身，可消除系统集成难题，快速、轻松地部署高性能的商务分析软件。 SAP BusinessObjects Business Intelligence 存在安全漏洞，攻击者可导入恶意js文件触发跨站脚本。

Severity

低

Patch Name

SAP BusinessObjects Business Intelligence Platform跨站脚本漏洞（CNVD-2021-03700）的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-21447

Impacted products

Name
['SAP SAP BusinessObjects Business Intelligence Platform 410', 'SAP SAP BusinessObjects Business Intelligence Platform 420']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-21447",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-21447"
    }
  },
  "description": "SAP BusinessObjects Business Intelligence Platform\u662f\u5fb7\u56fd\u601d\u7231\u666e\uff08SAP\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u5b8c\u5907\u7684\u5546\u52a1\u5206\u6790\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u96c6\u5e02\u573a\u9886\u5148\u7684 SAP \u6570\u636e\u6574\u5408\u4ea7\u54c1\u3001\u6570\u636e\u7ba1\u7406\u4ea7\u54c1\u548c\u5546\u52a1\u667a\u80fd (BI) \u4ea7\u54c1\u4e8e\u4e00\u8eab\uff0c\u53ef\u6d88\u9664\u7cfb\u7edf\u96c6\u6210\u96be\u9898\uff0c\u5feb\u901f\u3001\u8f7b\u677e\u5730\u90e8\u7f72\u9ad8\u6027\u80fd\u7684\u5546\u52a1\u5206\u6790\u8f6f\u4ef6\u3002\n\nSAP BusinessObjects Business Intelligence \u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5bfc\u5165\u6076\u610fjs\u6587\u4ef6\u89e6\u53d1\u8de8\u7ad9\u811a\u672c\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1ahttps://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-03700",
  "openTime": "2021-01-18",
  "patchDescription": "SAP BusinessObjects Business Intelligence Platform\u662f\u5fb7\u56fd\u601d\u7231\u666e\uff08SAP\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u5b8c\u5907\u7684\u5546\u52a1\u5206\u6790\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u96c6\u5e02\u573a\u9886\u5148\u7684 SAP \u6570\u636e\u6574\u5408\u4ea7\u54c1\u3001\u6570\u636e\u7ba1\u7406\u4ea7\u54c1\u548c\u5546\u52a1\u667a\u80fd (BI) \u4ea7\u54c1\u4e8e\u4e00\u8eab\uff0c\u53ef\u6d88\u9664\u7cfb\u7edf\u96c6\u6210\u96be\u9898\uff0c\u5feb\u901f\u3001\u8f7b\u677e\u5730\u90e8\u7f72\u9ad8\u6027\u80fd\u7684\u5546\u52a1\u5206\u6790\u8f6f\u4ef6\u3002\r\n\r\nSAP BusinessObjects Business Intelligence \u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5bfc\u5165\u6076\u610fjs\u6587\u4ef6\u89e6\u53d1\u8de8\u7ad9\u811a\u672c\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "SAP BusinessObjects Business Intelligence Platform\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2021-03700\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "SAP SAP BusinessObjects Business Intelligence Platform 410",
      "SAP SAP BusinessObjects Business Intelligence Platform 420"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-21447",
  "serverity": "\u4f4e",
  "submitTime": "2021-01-14",
  "title": "SAP BusinessObjects Business Intelligence Platform\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2021-03700\uff09"
}

CVE-2021-21447 (GCVE-0-2021-21447)

Vulnerability from cvelistv5 – Published: 2021-01-12 14:40 – Updated: 2024-08-03 18:16

Summary

SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored Cross-Site Scripting.

Severity

5.4 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE

Cross Site Scripting

Assigner

sap mitre root

References

2 references

URL	Tags
https://wiki.scn.sap.com/wiki/pages/viewpage.acti…	x_refsource_MISC
https://launchpad.support.sap.com/#/notes/2965154	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
SAP SE	SAP BusinessObjects Business Intelligence platform (Web Intelligence HTML interface)	Affected: < 410 Affected: < 420

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T18:16:22.247Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://launchpad.support.sap.com/#/notes/2965154"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SAP BusinessObjects Business Intelligence platform (Web Intelligence HTML interface)",
          "vendor": "SAP SE",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 410"
            },
            {
              "status": "affected",
              "version": "\u003c 420"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored Cross-Site Scripting."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross Site Scripting",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-11T20:23:46.000Z",
        "orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
        "shortName": "sap"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://launchpad.support.sap.com/#/notes/2965154"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cna@sap.com",
          "ID": "CVE-2021-21447",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SAP BusinessObjects Business Intelligence platform (Web Intelligence HTML interface)",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "\u003c",
                            "version_value": "410"
                          },
                          {
                            "version_name": "\u003c",
                            "version_value": "420"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "SAP SE"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored Cross-Site Scripting."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": "5.4",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross Site Scripting"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
              "refsource": "MISC",
              "url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476"
            },
            {
              "name": "https://launchpad.support.sap.com/#/notes/2965154",
              "refsource": "MISC",
              "url": "https://launchpad.support.sap.com/#/notes/2965154"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
    "assignerShortName": "sap",
    "cveId": "CVE-2021-21447",
    "datePublished": "2021-01-12T14:40:43.000Z",
    "dateReserved": "2020-12-30T00:00:00.000Z",
    "dateUpdated": "2024-08-03T18:16:22.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2021-03700

CVE-2021-21447 (GCVE-0-2021-21447)

Tags

Sightings

Nomenclature

Related by attack behaviour