SAP BusinessObjects Business Intelligence Platform (Crystal Report) versions - 420 430 does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability leading to non-permanently deface or modify displayed content from a Web site.