Approved changes feed: RSS · Atom

cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.10:*:*:*:*:*:*:*

part: a version: 4.10 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductBusinessobjects Business Intelligence Platform (a3c0e562-4ca7-57ca-9f31-6b0635368433)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-0352 vulnerable 2026-06-08 05:12:19.755070 Details available
In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.
Published: 2019-09-10T16:03:38.000Z
Updated: 2024-08-04T17:44:16.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2471 vulnerable 2026-06-08 05:11:37.218635 Details available
Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted.
Published: 2018-10-09T13:00:00.000Z
Updated: 2024-08-05T04:21:34.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2397 vulnerable 2026-06-08 05:11:37.023552 Details available
MEDIUM (5.4)
In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.
Published: 2018-03-14T19:00:00.000Z
Updated: 2024-08-05T04:21:32.881Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.