CVE-2019-0259

SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script files) without proper file format validation.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cna@sap.com

Published

2019-02-15

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Businessobjects (Sap)
• Sap Businessobjects Business Intelligence Platform Servers Enterprise (Sap Se)

References

• http://www.securityfocus.com/bid/106997
• https://launchpad.support.sap.com/#/notes/2727564
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943