{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2025-31326",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2025-31326",
    "idYear": 2025,
    "status": "PUBLISHED",
    "publishedAt": "2025-07-08T00:34:21.578Z",
    "updatedAt": "2025-07-08T16:14:46.644Z",
    "importedAt": "2026-10-24T01:57:29.455Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)",
      "summary": "SAP�BusinessObjects Business�Intelligence Platform (Web Intelligence) is vulnerable to HTML Injection, allowing an attacker with basic user privileges to inject malicious code into specific input fields. This could lead to unintended redirects or manipulation of application behavior, such as redirecting users to attacker-controlled domains. This issue primarily affects the integrity of the system. However, the confidentiality and availability of the system remain unaffected.",
      "affected": [
        {
          "vendor": "SAP_SE",
          "product": "SAP BusinessObjects Business Intelligence Platform (Web Intelligence)",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "ENTERPRISE 430",
              "status": "affected"
            },
            {
              "version": "2025",
              "status": "affected"
            },
            {
              "version": "2027",
              "status": "affected"
            },
            {
              "version": "ENTERPRISECLIENTTOOLS 430",
              "status": "affected"
            }
          ]
        }
      ]
    }
  }
}