sap businessobjects business intelligence 430 vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

During an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions 420, 430, authentication credentials are being exposed in Sysmon event logs. This Information Disclosure could cause a high impact on systems’ Confidentiality, Integrity, and Avai...

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430 Sap Businessobjects 430 Sap Businessobjects 420

6.1

CVSSv3

SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This could, as a result, nullify the added X-Frame-Options header leading to Clickjacking ...

Sap Businessobjects Business Intelligence 410 Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

7.2

CVSSv3

SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token of any logged-in BI user over the network without any user interaction. The attacker can impersonate any user on the platf...

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

9.8

CVSSv3

An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, can get access to lcmbiar file and further decrypt the file. After this attacker can gain access to BI user’s passwords and depending on the p...

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

6.1

CVSSv3

Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated malicious user to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or modify informatio...

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

9.9

CVSSv3

SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, under certain condition allows an authenticated malicious user to view sensitive information which is otherwise restricted. On successful exploitation, the attacker can completely compr...

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

1 Article

6.1

CVSSv3

Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an unauthenticated malicious user to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

5.4

CVSSv3

SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a...

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

5.4

CVSSv3

SAP BusinessObjects Business Intelligence platform (Analysis for OLAP) - versions 420, 430, allows an authenticated malicious user to send user-controlled inputs when OLAP connections are created and edited in the Central Management Console. On successful exploitation, there coul...

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

9

CVSSv3

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely...

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook