Businessobjects
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:businessobjects:3.2:*:enterprise_xi:*:*:*:*:*
part: a version: 3.2 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Businessobjects (41449a32-b994-5050-a032-626373b63fd6) |
| Edition | enterprise_xi |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-3983 |
vulnerable | 2026-06-08 04:55:18.179092 |
Details available
CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involving the Program Job Server and the Program Login property.
Published: 2010-10-18T16:00:00.000Z
Updated: 2024-08-07T03:26:12.352Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3982 |
vulnerable | 2026-06-08 04:55:18.178835 |
Details available
SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning" issue.
Published: 2010-10-18T16:00:00.000Z
Updated: 2024-08-07T03:26:12.334Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3981 |
vulnerable | 2026-06-08 04:55:18.178547 |
Details available
Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to inject arbitrary web script or HTML via the ServiceClass field to the Edit Service Parameters page.
Published: 2010-10-18T16:00:00.000Z
Updated: 2024-08-07T03:26:12.276Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3980 |
vulnerable | 2026-06-08 04:55:18.178247 |
Details available
Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI.
Published: 2010-10-18T16:00:00.000Z
Updated: 2024-09-17T03:59:59.698Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3979 |
vulnerable | 2026-06-08 04:55:18.177868 |
Details available
Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid username, which allows remote attackers to enumerate account names via a login SOAPAction to the dswsbobje/services/session URI.
Published: 2010-10-18T16:00:00.000Z
Updated: 2024-09-17T02:07:13.348Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0219 |
vulnerable | 2026-06-08 04:51:53.591043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.