BB
Product
Businessobjects Business Intelligence Platform
73
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 20Medium 46Low 0
Watch
Add Businessobjects Business Intelligence Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-0022 | 8.8 | Jan 10 | SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious code that can be executed by the application over the… Affected: 420; 430 |
| CVE-2022-35228 | 8.8 | Jul 12 | SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted Affected: 420; 430 |
| CVE-2020-6219 | 8.8 | Apr 14 | SAP Business Objects Business Intelligence Platform (CrystalReports WebForm Viewer), versions 4.1, 4.2, and Crystal Reports for VS version 2010, allows an attacker with basic… Affected: 4.1; 4.2 |
| CVE-2019-0398 | 8.8 | Dec 11 | Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated… Affected: 4.1; 4.2; 4.3 |
| CVE-2026-0508 | 8.1 | Feb 10 | Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform Affected: 430; 2025; 2027 |
| CVE-2022-28213 | 8.1 | Apr 12 | When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an… Affected: 420; 430 |
| CVE-2026-0490 | 7.5 | Feb 10 | Denial of service (DOS) in SAP BusinessObjects BI Platform Affected: 430; 2025; 2027 |
| CVE-2026-0485 | 7.5 | Feb 10 | Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform Affected: 430; 2025; 2027 |
| CVE-2023-27271 | 7.5 | Mar 14 | In SAP BusinessObjects Business Intelligence Platform (Web Services) - versions 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect… Affected: 420; 430 |
| CVE-2022-27667 | 7.5 | Apr 12 | Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version 430, allows an attacker to access information which would… Affected: 430 |
| CVE-2021-40500 | 7.5 | Oct 12 | SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to… Affected: 4.20; 4.30 |
| CVE-2020-6247 | 7.5 | May 12 | SAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated attacker to prevent legitimate users from accessing a service Affected: 4.2 |
| CVE-2020-6237 | 7.5 | Apr 14 | Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacker to access information which would… Affected: 4.1; 4.2 |
| CVE-2020-6227 | 7.5 | Apr 14 | SAP Business Objects Business Intelligence Platform (CMS / Auditing issues), version 4.2, allows attacker to send specially crafted GIOP packets to several services due to… Affected: 4.2 |
| CVE-2019-0352 | 7.5 | Sep 10 | In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the… Affected: 4.10; 4.20; 4.30 |
| CVE-2018-2471 | 7.5 | Oct 9 | Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted Affected: 4.10; 4.20 |
| CVE-2023-42472 | 7.3 | Sep 12 | Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload… Affected: 420 |
| CVE-2025-31332 | 7.1 | Apr 8 | Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting… Affected: 430 |
| CVE-2023-0020 | 7.1 | Feb 14 | SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted Affected: 420; 430 |
| CVE-2019-0396 | 7.1 | Nov 13 | SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted… Affected: 4.0; 4.1; 4.1; 4.1 |
Showing 20