Businessobjects Edge (Sap) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2021-08-09. Vendor: Sap.

CVEs of Businessobjects Edge

• CVE-2015-2074 - CVSS 7.5 (high), 2021-08-09: The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka…
• CVE-2015-2073 - CVSS 7.5 (high), 2021-08-09: The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP…
• CVE-2014-9320 - CVSS 9.8 (critical), 2021-08-09: SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM privileges via…
• CVE-2015-7730 - CVSS 10 (critical), 2015-10-15: SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial of service…
• CVE-2015-2076 - CVSS 5 (medium), 2015-02-27: The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395.
• CVE-2015-2075 - CVSS 5 (medium), 2015-02-27: SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396.