Sap Businessobjects Business Intelligence Platform (Sap Se) - vulnerabilities (CVEs)
31 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2026-05-12. Vendor: Sap Se.
CVEs of Sap Businessobjects Business Intelligence Platform
- CVE-2026-0502 - CVSS 5.4 (medium), 2026-05-12: Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send…
- CVE-2026-27683 - CVSS 4.1 (medium), 2026-04-14: SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs. When a…
- CVE-2026-24318 - CVSS 4.2 (medium), 2026-04-14: Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid…
- CVE-2026-0508 - CVSS 8.1 (high), 2026-02-10: The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application.…
- CVE-2025-42896 - CVSS 5.4 (medium), 2025-12-09: SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the…
- CVE-2025-31332 - CVSS 7.1 (high), 2025-04-08: Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files…
- CVE-2025-0062 - CVSS 4.7 (medium), 2025-03-11: SAP BusinessObjects Business Intelligence Platform allows an attacker to inject JavaScript code in Web Intelligence reports. This code is then executed in the…
- CVE-2025-0061 - CVSS 9.1 (critical), 2025-01-14: SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user…
- CVE-2025-0060 - CVSS 6.5 (medium), 2025-01-14: SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can read sensitive…
- CVE-2024-32732 - CVSS 5.3 (medium), 2024-12-10: Under certain conditions SAP BusinessObjects Business Intelligence platform allows an attacker to access information which would otherwise be restricted.This…
- CVE-2024-45281 - CVSS 5.8 (medium), 2024-09-10: SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally…
- CVE-2024-42375 - CVSS 4.3 (medium), 2024-08-13: SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the…
- CVE-2024-41730 - CVSS 9.8 (critical), 2024-08-13: In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token…
- CVE-2024-41731 - CVSS 4.3 (medium), 2024-08-13: SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the…
- CVE-2024-28166 - CVSS 4.3 (medium), 2024-08-13: SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the…
- CVE-2024-34684 - CVSS 6 (medium), 2024-06-11: On Unix, SAP BusinessObjects Business Intelligence Platform (Scheduling) allows an authenticated attacker with administrator access on the local server to…
- CVE-2024-28165 - CVSS 9.3 (critical), 2024-05-14: SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which…
- CVE-2023-36917 - CVSS 7.5 (high), 2023-07-11: SAP BusinessObjects Business Intelligence Platform - version 420, 430, allows an unauthorized attacker who had hijacked a user session, to be able to bypass…
- CVE-2023-30741 - CVSS 6.1 (medium), 2023-05-09: Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect…
- CVE-2023-30740 - CVSS 7.6 (high), 2023-05-09: SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise…
- CVE-2023-31406 - CVSS 6.1 (medium), 2023-05-09: Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect…
- CVE-2023-0020 - CVSS 8.5 (high), 2023-02-14: SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise…
- CVE-2022-29619 - CVSS 6.5 (medium), 2022-07-12: Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of…
- CVE-2022-28213 - CVSS 8.1 (high), 2022-04-12: When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML…
- CVE-2022-27671 - CVSS 6.5 (medium), 2022-04-12: A CSRF token visible in the URL may possibly lead to information disclosure vulnerability.
- CVE-2022-27667 - CVSS 7.5 (high), 2022-04-12: Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version 430, allows an attacker to access…
- CVE-2022-22541 - CVSS 6.5 (medium), 2022-04-12: SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational…
- CVE-2021-42061 - CVSS 5.4 (medium), 2021-12-14: SAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not sufficiently encode user-controlled inputs, resulting in…
- CVE-2020-6251 - CVSS 6.5 (medium), 2020-05-12: Under certain conditions or error scenarios SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which…
- CVE-2020-6221 - CVSS 5.4 (medium), 2020-04-14: Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled…
- CVE-2019-0289 - CVSS 7.1 (high), 2019-05-14: Under certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP), versions 4.2 and 4.3, allows an attacker to access…
