CVE-2004-0534

Published: Sep 17, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.

Affected (10)

Products: Businessobjects: Infoview, Webintelligence

Businessobjects

2 products

Infoview

Webintelligence

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Businessobjects Infoview	Version 5.1.4
Businessobjects Infoview	Version 5.1.5
Businessobjects Infoview	Version 5.1.6
Businessobjects Infoview	Version 5.1.7
Businessobjects Infoview	Version 5.1.8
Businessobjects Webintelligence	Version 2.7.1
Businessobjects Webintelligence	Version 2.7.2
Businessobjects Webintelligence	Version 2.7.3
Businessobjects Webintelligence	Version 2.7.4
Businessobjects Webintelligence	Version 2.7