CVE-2014-8308: Cross-site scripting (XSS) vulnerability in the Send to Inbox functionality in SAP BusinessObjects BI EDGE...

Security readout for executives and security teams

This issue affects SAP BusinessObjects BI EDGE 4.0. A flaw in the Send to Inbox feature can let a remote attacker store or inject script or HTML that may run in another user’s browser. The sources do not provide CVSS scoring, exploit details, or evidence of active exploitation. Likely exposure is limited to organizations running SAP BusinessObjects BI EDGE 4.0, especially deployments where users can access Send to Inbox functionality. The provided affected-product data is incomplete and does not name additional versions or CPEs. Treat this as a targeted enterprise application remediation item, not an emergency based on current evidence. Prioritize systems exposed to the internet or broadly used internally, because successful XSS could compromise user sessions or BI data access. Mitigation focus: Review SAP Note 1941562 and apply SAP’s official guidance for affected BusinessObjects installations.; Identify and upgrade or patch SAP BusinessObjects BI EDGE 4.0 deployments if vendor guidance requires it.; Limit external access to BusinessObjects portals until exposure and patch status are confirmed..

Prepared

Jun 14, 2026, 13:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.