Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SAP BusinessObjects Enterprise does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site Scripting (XSS) vulnerability. This enables an admin user to inject malicious JavaScript into a website and the injected script gets executed when the user visits the compromised page.This vulnerability has low impact on confidentiality and integrity of the data. There is no impact on the availability of the application.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 1 product
CVE-2026-24325 Stored Cross-Site Scripting Vulnerability in SAP BusinessObjects ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24325 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The tweet announces CVE‑2026‑24325, a stored XSS flaw in SAP BusinessObjects, but provides no PoC, exploit, or patch details.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | sap | businessobjects_enterprise | 2025 | - | - |
| App | sap | businessobjects_enterprise | 2027 | - | - |
| App | sap | businessobjects_enterprise | 430 | - | - |