BO
Product
Business Objects Business Intelligence Platform
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 13Low 0
Watch
Add Business Objects Business Intelligence Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-39015 | 6.5 | Oct 11 | Under certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which would otherwise be restricted Affected: 420; 430 |
| CVE-2022-24398 | 6.5 | Mar 10 | Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which would otherwise be… Affected: 420; 430 |
| CVE-2022-31596 | 6.0 | Dec 12 | Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform… Affected: 430 |
| CVE-2024-45281 | 5.8 | Sep 10 | DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform Affected: 430 |
| CVE-2023-23856 | 5.4 | Feb 14 | In SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430, some calls return json with wrong content type in the header of the response Affected: 430 |
| CVE-2023-0015 | 5.4 | Jan 10 | In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response Affected: 420 |
| CVE-2022-31598 | 5.4 | Jul 12 | Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation Affected: 420 |
| CVE-2020-6220 | 4.7 | Jun 6 | BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site… Affected: 4.1; 4.2 |
| CVE-2022-32246 | 4.6 | Jul 12 | SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI admin console to send… Affected: 420; 430 |
| CVE-2024-42375 | 4.3 | Aug 13 | SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application Affected: 420; 430; 440 |
| CVE-2024-41731 | 4.3 | Aug 13 | SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application Affected: 430; 440; enterprise_420 |
| CVE-2024-28166 | 4.3 | Aug 13 | SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application Affected: 430; 440; enterprise_420 |
| CVE-2022-41263 | 4.3 | Dec 12 | Due to a missing authentication check, SAP Business Objects Business Intelligence Platform (Web Intelligence) - versions 420, 430, allows an authenticated non-administrator… Affected: 420; 430 |
Showing 13