SAP SE SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad)

• CVE-2021-21444 Medium 5.4 SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This could 0.8%
• CVE-2020-6257 Medium 5.4 SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad) 4.2 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. 0.5%