SAP SE SAP BusinessObjects Business Intelligence Platform
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-29619 | 420 ; 430 | Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit o | MEDIUM 6.5 | 0.9 % | ||
| CVE-2022-27671 | 420 ; 430 | A CSRF token visible in the URL may possibly lead to information disclosure vulnerability. | MEDIUM 6.5 | 1.3 % | ||
| CVE-2022-28213 | 420 ; 430 | When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently vali | HIGH 8.1 | 12 % | ||
| CVE-2022-22541 | 420 ; 430 | SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see | MEDIUM 6.5 | 0.8 % | ||
| CVE-2022-27667 | 430 | Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version 430, allows an attac | HIGH 7.5 | 1.4 % | ||
| CVE-2021-42061 | < 420 | SAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not sufficiently encode user-controlled inputs, re | MEDIUM 5.4 | 0.5 % | ||
| CVE-2020-6251 | < 4.2 | Under certain conditions or error scenarios SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access i | MEDIUM 6.5 | 0.8 % | ||
| CVE-2020-6221 | < 4.1 ; < 4.2 | Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-0289 | < 4.2 ; < 4.3 | Under certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP), versions 4.2 and 4.3, allows an attacker to | HIGH 7.1 | 1.1 % |