CVE-2025-31326

{"id": "CVE-2025-31326", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "cna@sap.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.3}]}, "published": "2025-07-08T01:15:21.810", "references": [{"url": "https://me.sap.com/notes/3573199", "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "source": "cna@sap.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-80"}]}], "descriptions": [{"lang": "en", "value": "SAP\ufffdBusinessObjects Business\ufffdIntelligence Platform (Web Intelligence) is vulnerable to HTML Injection, allowing an attacker with basic user privileges to inject malicious code into specific input fields. This could lead to unintended redirects or manipulation of application behavior, such as redirecting users to attacker-controlled domains. This issue primarily affects the integrity of the system. However, the confidentiality and availability of the system remain unaffected."}, {"lang": "es", "value": "SAP BusinessObjects Business Intelligence Platform (Web Intelligence) es vulnerable a la inyecci\u00f3n de HTML, lo que permite a un atacante con privilegios de usuario b\u00e1sicos inyectar c\u00f3digo malicioso en campos de entrada espec\u00edficos. Esto podr\u00eda provocar redirecciones no deseadas o la manipulaci\u00f3n del comportamiento de la aplicaci\u00f3n, como redirigir a los usuarios a dominios controlados por el atacante. Este problema afecta principalmente a la integridad del sistema. Sin embargo, la confidencialidad y la disponibilidad del sistema permanecen intactas."}], "lastModified": "2025-07-08T16:18:14.207", "sourceIdentifier": "cna@sap.com"}