Businessobjects Business Intelligence
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:businessobjects_business_intelligence:4.1:*:*:*:*:*:*:*
part: a version: 4.1 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Businessobjects Business Intelligence (5b68eb46-86d2-5203-8a64-0fbdf2fe6941) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-0348 |
vulnerable | 2026-06-08 05:12:19.736737 |
Details available
SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can access database with unencrypted connection, even if the quality of protection should be encrypted.
Published: 2019-08-14T13:55:54.000Z
Updated: 2024-08-04T17:44:16.472Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0335 |
vulnerable | 2026-06-08 05:12:19.718792 |
Details available
Under certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management Console), versions 4.1, 4.2, 4.3, allows an attacker to store a malicious payload within the description field of a user account. The payload is triggered when the mouse cursor is moved over the description field in the list, when generating the little yellow informational pop up box, resulting in Stored Cross Site Scripting Attack.
Published: 2019-08-14T13:44:29.000Z
Updated: 2024-08-04T17:44:16.490Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0334 |
vulnerable | 2026-06-08 05:12:19.716991 |
Details available
When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other sensitive information, leading to Stored Cross Site Scripting.
Published: 2019-08-14T13:48:51.000Z
Updated: 2024-08-04T17:44:16.482Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0332 |
vulnerable | 2026-06-08 05:12:19.715012 |
Details available
SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an attacker to give some payload for keyword in the search and it will be executed while search performs its action, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2019-08-14T13:44:00.000Z
Updated: 2024-08-04T17:44:16.487Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0331 |
vulnerable | 2026-06-08 05:12:19.712031 |
Details available
Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure.
Published: 2019-08-14T13:43:15.000Z
Updated: 2024-08-04T17:44:16.543Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0326 |
vulnerable | 2026-06-08 05:12:19.699422 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0268 |
vulnerable | 2026-06-08 05:12:19.563835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2483 |
vulnerable | 2026-06-08 05:11:37.241800 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2473 |
vulnerable | 2026-06-08 05:11:37.221408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2445 |
vulnerable | 2026-06-08 05:11:37.159231 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2442 |
vulnerable | 2026-06-08 05:11:37.154157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2432 |
vulnerable | 2026-06-08 05:11:37.117647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.