Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_business_objects_business_intelligence_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Business Objects Business Intelligence Platform (6d40da74-ba71-574c-8a5a-ea6fbf87f12f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-44755 vulnerable 2026-07-29 00:52:14.637273 Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform
MEDIUM (4.3)
SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters supplied by authenticated users, resulting in an email spoofing vulnerability.This vulnerability has a low impact on integrity and does not affect the confidentiality and availability of the application.
Published: 2026-06-09T00:21:39.233Z
Updated: 2026-06-09T14:32:41.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-42988 vulnerable 2026-06-08 07:25:08.510515 Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform
LOW (3.7)
Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no impact on integrity and availability of the application.
Published: 2025-06-10T00:12:00.282Z
Updated: 2025-06-10T15:26:39.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23185 vulnerable 2026-06-08 07:10:55.299358 Information Disclosure in SAP Business Objects Business Intelligence Platform
MEDIUM (4.1)
Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they could use it to craft further exploits. There is no impact on the integrity and availability of the application.
Published: 2025-03-11T00:31:51.113Z
Updated: 2025-03-11T02:17:05.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24398 vulnerable 2026-06-08 05:41:00.255597 Details available
Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which would otherwise be restricted.
Published: 2022-03-08T13:35:41.000Z
Updated: 2024-08-03T04:07:02.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6294 vulnerable 2026-06-08 05:26:45.013309 Details available
HIGH (8.5)
Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionalities that require user identity.
Published: 2020-08-12T13:27:19.000Z
Updated: 2024-08-04T08:55:22.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6269 vulnerable 2026-06-08 05:26:44.968279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6247 vulnerable 2026-06-08 05:26:44.902229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6245 vulnerable 2026-06-08 05:26:44.899814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6237 vulnerable 2026-06-08 05:26:44.864495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6223 vulnerable 2026-06-08 05:26:44.790440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6220 vulnerable 2026-06-08 05:26:44.785010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6218 vulnerable 2026-06-08 05:26:44.779404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6211 vulnerable 2026-06-08 05:26:44.752012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6195 vulnerable 2026-06-08 05:26:44.693935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2397 vulnerable 2026-06-08 05:11:37.022293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.