In SAP Business Objects Business Intelligence Platform 4.00 4.10 4.20 4.30 the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.