SAP SE SAP Business Objects Business Intelligence Platform
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-6220 | 4.1 ; 4.2 | BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled | MEDIUM 4.7 | 0.5 % | ||
| CVE-2022-24398 | < 420 ; < 430 | Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access | MEDIUM 6.5 | 0.8 % | ||
| CVE-2020-6294 | < 4.2 ; < 4.3 | Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication check | CRITICAL 9.1 | 1.5 % | ||
| CVE-2020-6269 | < 4.2 | Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which wo | MEDIUM 6.5 | 0.8 % | ||
| CVE-2020-6247 | < 4.2 | SAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated attacker to prevent legitimate users from access | HIGH 7.5 | 1.0 % | ||
| CVE-2020-6245 | < 4.2 | SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code t | MEDIUM 6.7 | 0.3 % | ||
| CVE-2020-6211 | < 4.1 ; < 4.2 | SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an attacker to redirect users to a malicious sit | MEDIUM 6.1 | 0.7 % | ||
| CVE-2020-6195 | < 4.1 ; < 4.2 | SAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext password in the response, leading to Informatio | CRITICAL 9.8 | 0.6 % | ||
| CVE-2020-6237 | < 4.1 ; < 4.2 | Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacke | HIGH 7.5 | 1.1 % | ||
| CVE-2020-6223 | < 4.1 ; < 4.2 | The open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to modify certain error page | MEDIUM 6.1 | 0.7 % | ||
| CVE-2020-6218 | < 4.1 ; < 4.2 | Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to access inform | MEDIUM 5.0 | 0.9 % | ||
| CVE-2018-2397 | 4.00 ; 4.10 ; 4.20 ; … | In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently e | MEDIUM 5.4 | 0.9 % |