SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an malicious user to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application