SAP

Businessobjects Business Intelligence Platform

60 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2019-0396

  • EPSS 0.43%
  • Published 13.11.2019 23:15:11
  • Last modified 21.11.2024 04:16:47

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains m...

5.4

CVE-2019-0382

  • EPSS 0.35%
  • Published 13.11.2019 22:15:11
  • Last modified 21.11.2024 04:16:46

A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pages); corrected in version 4.2. Privileges are required in order to exploit this vulnerability.

5.4

CVE-2019-0378

  • EPSS 0.3%
  • Published 08.10.2019 20:15:11
  • Last modified 21.11.2024 04:16:45

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before version 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the file name of the background image r...

5.4

CVE-2019-0377

  • EPSS 0.3%
  • Published 08.10.2019 20:15:11
  • Last modified 21.11.2024 04:16:45

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the input controls, resulting in Store...

5.4

CVE-2019-0376

  • EPSS 0.3%
  • Published 08.10.2019 20:15:11
  • Last modified 21.11.2024 04:16:45

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which can...

5.4

CVE-2019-0375

  • EPSS 0.46%
  • Published 08.10.2019 20:15:11
  • Last modified 21.11.2024 04:16:45

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the export dialog box of the report name resulti...

5.4

CVE-2019-0374

  • EPSS 0.46%
  • Published 08.10.2019 20:15:11
  • Last modified 21.11.2024 04:16:45

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the chart title resulting in reflected Cross-Sit...

7.5

CVE-2019-0352

  • EPSS 0.28%
  • Published 10.09.2019 17:15:10
  • Last modified 21.11.2024 04:16:43

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logou...

7.5

CVE-2018-2471

  • EPSS 0.37%
  • Published 09.10.2018 13:29:01
  • Last modified 21.11.2024 04:03:52

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted.

5.4

CVE-2018-2397

  • EPSS 0.17%
  • Published 14.03.2018 19:29:00
  • Last modified 21.11.2024 04:03:44

In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.