BO
Product
Business Objects Business Intelligence Platform
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 13Low 0
Watch
Add Business Objects Business Intelligence Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-41730 | 9.8 | Aug 13 | In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST… Affected: enterprise_430; enterprise_440 |
| CVE-2023-25617 | 8.8 | Mar 14 | SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated… Affected: 420; 430 |
| CVE-2023-25616 | 8.8 | Mar 14 | In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could… Affected: 420; 430 |
| CVE-2022-41267 | 8.8 | Dec 13 | SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Business Objects server at the operating… Affected: 420; 430 |
| CVE-2023-42478 | 7.6 | Dec 12 | SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when opened by any other user… Affected: 420; 430 |
| CVE-2022-39013 | 7.6 | Oct 11 | Under certain conditions an authenticated attacker can get access to OS credentials Affected: 420; 430 |
| CVE-2022-39015 | 6.5 | Oct 11 | Under certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which would otherwise be restricted Affected: 420; 430 |
| CVE-2022-24398 | 6.5 | Mar 10 | Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which would otherwise be… Affected: 420; 430 |
| CVE-2022-31596 | 6.0 | Dec 12 | Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform… Affected: 430 |
| CVE-2024-45281 | 5.8 | Sep 10 | DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform Affected: 430 |
| CVE-2023-23856 | 5.4 | Feb 14 | In SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430, some calls return json with wrong content type in the header of the response Affected: 430 |
| CVE-2023-0015 | 5.4 | Jan 10 | In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response Affected: 420 |
| CVE-2022-31598 | 5.4 | Jul 12 | Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation Affected: 420 |
| CVE-2020-6220 | 4.7 | Jun 6 | BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site… Affected: 4.1; 4.2 |
| CVE-2022-32246 | 4.6 | Jul 12 | SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI admin console to send… Affected: 420; 430 |
| CVE-2024-42375 | 4.3 | Aug 13 | SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application Affected: 420; 430; 440 |
| CVE-2024-41731 | 4.3 | Aug 13 | SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application Affected: 430; 440; enterprise_420 |
| CVE-2024-28166 | 4.3 | Aug 13 | SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application Affected: 430; 440; enterprise_420 |
| CVE-2022-41263 | 4.3 | Dec 12 | Due to a missing authentication check, SAP Business Objects Business Intelligence Platform (Web Intelligence) - versions 420, 430, allows an authenticated non-administrator… Affected: 420; 430 |
Showing 19