sap businessobjects web intelligence 430 vulnerabilities and exploits

(subscribe to this query)

Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an malicious user to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.

Sap Businessobjects Web Intelligence 420 Sap Businessobjects Web Intelligence 430

SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a...

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

SAP BusinessObjects Business Intelligence Platform (Web Services) - versions 420, 430, allows an malicious user to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful exploitation, attack...

Sap Businessobjects Business Intelligence 420 Sap Businessobjects Business Intelligence 430

In SAP BusinessObjects Business Intelligence Platform (Web Services) - versions 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own admintools, leading to a high impact on availability.

Sap Businessobjects Business Intelligence Platform 420 Sap Businessobjects Business Intelligence Platform 430

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful e...

Sap Businessobjects Business Intelligence Platform 420 Sap Businessobjects Business Intelligence Platform 430

Due to improper input sanitization of user-controlled input in SAP BusinessObjects Business Intelligence Platform CMC application - versions 420, and 430, an attacker with basic user-level privileges can modify/upload crystal reports containing a malicious payload. Once these rep...

Sap Businessobjects Business Intelligence Platform 420 Sap Businessobjects Business Intelligence Platform 430

SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated malicious user to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful...

Sap Businessobjects Business Intelligence Platform 4.1 Sap Businessobjects Business Intelligence Platform 4.2 Sap Businessobjects Business Intelligence Platform 4.3

3 Github repositories

In SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to...

Sap Business Objects Business Intelligence Platform 430

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook