SAP SE SAP Business Objects Web Intelligence (BI Launchpad)

• CVE-2022-22546 Unrated Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420. 0.5%
• CVE-2021-33667 Medium 4.3 Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a p 0.7%