Vulnerabilities (CVE)

Vendor filter

Sap Subscribe

Product filter

Businessobjects Business Intelligence Platform Subscribe

Filter

8 total CVE
CVE Vendors Products Updated CVSS
CVE-2019-0374 1 Sap 1 Businessobjects Business Intelligence Platform 2019-10-10 3.5
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the chart title resulting in reflected...
CVE-2019-0375 1 Sap 1 Businessobjects Business Intelligence Platform 2019-10-10 3.5
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the export dialog box of the report name...
CVE-2019-0376 1 Sap 1 Businessobjects Business Intelligence Platform 2019-10-10 3.5
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which...
CVE-2019-0377 1 Sap 1 Businessobjects Business Intelligence Platform 2019-10-10 3.5
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the input controls, resulting in...
CVE-2019-0378 1 Sap 1 Businessobjects Business Intelligence Platform 2019-10-10 3.5
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before version 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the file name of the background...
CVE-2018-2397 1 Sap 1 Businessobjects Business Intelligence Platform 2019-10-09 3.5
In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.
CVE-2019-0352 1 Sap 1 Businessobjects Business Intelligence Platform 2019-09-11 5.0
In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.
CVE-2018-2471 1 Sap 1 Businessobjects Business Intelligence Platform 2018-11-23 5.0
Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted.