Vulnerabilities (CVE)

Filtered by vendor Sap Subscribe
Filtered by product Businessobjects Business Intelligence
Total 43 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-2431 1 Sap 1 Businessobjects Business Intelligence 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVE-2018-2427 1 Sap 2 Businessobjects Business Intelligence, Crystal Reports 2024-11-21 6.5 MEDIUM 8.8 HIGH
SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.
CVE-2024-37179 1 Sap 1 Businessobjects Business Intelligence 2024-11-14 N/A 6.5 MEDIUM
SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application.