Business Objects Business Intelligence Platform (Sap) - vulnerabilities (CVEs)

20 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2024-09-10. Vendor: Sap.

CVEs of Business Objects Business Intelligence Platform

• CVE-2024-45281 - CVSS 5.8 (medium), 2024-09-10: SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally…
• CVE-2024-42375 - CVSS 4.3 (medium), 2024-08-13: SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the…
• CVE-2024-41731 - CVSS 4.3 (medium), 2024-08-13: SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the…
• CVE-2024-41730 - CVSS 9.8 (critical), 2024-08-13: In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token…
• CVE-2024-28166 - CVSS 4.3 (medium), 2024-08-13: SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the…
• CVE-2024-28165 - CVSS 9.3 (critical), 2024-05-14: SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which…
• CVE-2023-42478 - CVSS 7.6 (high), 2023-12-12: SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when…
• CVE-2023-25616 - CVSS 9.9 (critical), 2023-03-14: In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection…
• CVE-2023-25617 - CVSS 9 (critical), 2023-03-14: SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is…
• CVE-2023-23856 - CVSS 5.4 (medium), 2023-02-14: In SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430, some calls return json with wrong content type in the header of…
• CVE-2023-0015 - CVSS 5.4 (medium), 2023-01-10: In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the…
• CVE-2022-41267 - CVSS 9.9 (critical), 2022-12-13: SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Business Objects server…
• CVE-2022-41263 - CVSS 4.3 (medium), 2022-12-12: Due to a missing authentication check, SAP Business Objects Business Intelligence Platform (Web Intelligence) - versions 420, 430, allows an authenticated…
• CVE-2022-31596 - CVSS 6 (medium), 2022-12-12: Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business…
• CVE-2022-39015 - CVSS 6.5 (medium), 2022-10-11: Under certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which would otherwise be restricted.
• CVE-2022-39013 - CVSS 7.6 (high), 2022-10-11: Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system…
• CVE-2022-32246 - CVSS 4.6 (medium), 2022-07-12: SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI…
• CVE-2022-31598 - CVSS 5.4 (medium), 2022-07-12: Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed…
• CVE-2020-6220 - CVSS 4.7 (medium), 2022-06-06: BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting…
• CVE-2022-24398 - CVSS 6.5 (medium), 2022-03-10: Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which…