sap businessobjects business intelligence 4.20 vulnerabilities and exploits

(subscribe to this query)

3.5

CVSSv2

SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Sap Businessobjects Business Intelligence 4.20 Sap Businessobjects Business Intelligence 4.10

4.3

CVSSv2

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Sap Businessobjects Business Intelligence 4.10 Sap Businessobjects Business Intelligence 4.20

5

CVSSv2

In SAP Business Objects Business Intelligence Platform, prior to 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.

Sap Businessobjects Business Intelligence Platform 4.10 Sap Businessobjects Business Intelligence Platform 4.20 Sap Businessobjects Business Intelligence Platform 4.30

3.5

CVSSv2

In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.

Sap Businessobjects Business Intelligence Platform 4.10 Sap Businessobjects Business Intelligence Platform 4.30 Sap Businessobjects Business Intelligence Platform 4.00 Sap Businessobjects Business Intelligence Platform 4.20

6.5

CVSSv2

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an malicious user to inject code that can be executed by the application. An attacker could thereby control the behaviour of the ...

Sap Crystal Reports -Sap Businessobjects Business Intelligence 4.20 Sap Businessobjects Business Intelligence 4.10

5

CVSSv2

SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated malicious user to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploita...

Sap Businessobjects Business Intelligence Platform 4.20 Sap Businessobjects Business Intelligence Platform 4.30

5

CVSSv2

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an malicious user to access information which would otherwise be restricted.

Sap Businessobjects Business Intelligence Platform 4.20 Sap Businessobjects Business Intelligence Platform 4.10

5.5

CVSSv2

SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an untrusted source.

Sap Businessobjects Business Intelligence 4.3 Sap Businessobjects Business Intelligence 4.2 Sap Businessobjects Business Intelligence 4.1

4.9

CVSSv2

SAP BusinessObjects Business Intelligence (BI Launchpad and Central Management Console) versions 4.10, 4.20 and 4.30 allow an malicious user to include invalidated data in the HTTP response header sent to a Web user. Successful exploitation of this vulnerability may lead to advan...

Sap Businessobjects Business Intelligence 4.1 Sap Businessobjects Business Intelligence 4.2 Sap Businessobjects Business Intelligence 4.3

4.3

CVSSv2

SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Sap Businessobjects Bi Platform 4.2 Sap Businessobjects Bi Platform 4.1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook