BB
Product
Businessobjects Business Intelligence Platform
73
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 20Medium 46Low 0
Watch
Add Businessobjects Business Intelligence Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6242 | 9.8 | May 12 | SAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an attacker to logon on the Central Management Console without… Affected: 1.0; 2.0; 2.1; 2.2; 2.3 |
| CVE-2020-6195 | 9.8 | Apr 14 | SAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure Affected: 4.1; 4.2 |
| CVE-2020-26831 | 9.6 | Dec 9 | SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing… Affected: 4.1; 4.2; 4.3 |
| CVE-2024-28165 | 9.3 | May 14 | SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high… Affected: 430; 440 |
| CVE-2025-0061 | 9.1 | Jan 14 | SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an… Affected: 420; 430; 2025 |
| CVE-2023-24530 | 9.1 | Feb 14 | SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application… Affected: 420; 430 |
| CVE-2020-6294 | 9.1 | Aug 12 | Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionalities that require user… Affected: 4.2; 4.3 |
Showing 7