CVE-2004-0533

EPSS 0.21%
Published 31.12.2004 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Businessobjects ≫ Infoview Version5.1.4

Businessobjects ≫ Infoview Version5.1.5

Businessobjects ≫ Infoview Version5.1.6

Businessobjects ≫ Infoview Version5.1.7

Businessobjects ≫ Infoview Version5.1.8

Businessobjects ≫ Webintelligence Version2.7

Businessobjects ≫ Webintelligence Version2.7.1

Businessobjects ≫ Webintelligence Version2.7.2

Businessobjects ≫ Webintelligence Version2.7.3

Businessobjects ≫ Webintelligence Version2.7.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.21%	0.396

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:N/I:P/A:N

http://secunia.com/advisories/12587/

Vendor Advisory

http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0056.html

Vendor Advisory

http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026549.html

Vendor Advisory

http://www.securityfocus.com/bid/11208

https://exchange.xforce.ibmcloud.com/vulnerabilities/17422

https://nvd.nist.gov/vuln/detail/CVE-2004-0533

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0533

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0533

EUVD