SAP

Business Intelligence Promotion Management Application

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2017-16681

  • EPSS 0.42%
  • Published 12.12.2017 14:29:00
  • Last modified 20.04.2025 01:37:25

Cross-Site Scripting (XSS) vulnerability in SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, 4.30, as user controlled inputs are not sufficiently encoded.

9.8

CVE-2017-16684

  • EPSS 0.51%
  • Published 12.12.2017 14:29:00
  • Last modified 20.04.2025 01:37:25

SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentication checks for functionalities that require user identity.