Businessobjects

Webintelligence

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2005-4274

  • EPSS 0.78%
  • Published 15.12.2005 22:03:00
  • Last modified 03.04.2025 01:03:51

Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service (user account lock out) via unknown attack vectors related to "authentication mechanisms" and "form input."

2.1

CVE-2004-0533

  • EPSS 0.21%
  • Published 31.12.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.

4.3

CVE-2004-0534

  • EPSS 0.55%
  • Published 17.09.2004 04:00:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.

7.5

CVE-2003-1249

  • EPSS 1.37%
  • Published 31.12.2003 05:00:00
  • Last modified 03.04.2025 01:03:51

WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.