Businessobjects Business Intelligence
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:businessobjects_business_intelligence:4.2:*:*:*:*:*:*:*
part: a version: 4.2 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Businessobjects Business Intelligence (5b68eb46-86d2-5203-8a64-0fbdf2fe6941) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-0348 |
vulnerable | 2026-06-08 05:12:19.736763 |
Details available
SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can access database with unencrypted connection, even if the quality of protection should be encrypted.
Published: 2019-08-14T13:55:54.000Z
Updated: 2024-08-04T17:44:16.472Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0346 |
vulnerable | 2026-06-08 05:12:19.735339 |
Details available
Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4.2, leads to disclosure of list of user names and roles imported from SAP NetWeaver BI systems, resulting in Information Disclosure.
Published: 2019-08-14T13:54:58.000Z
Updated: 2024-08-04T17:44:16.560Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0335 |
vulnerable | 2026-06-08 05:12:19.718819 |
Details available
Under certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management Console), versions 4.1, 4.2, 4.3, allows an attacker to store a malicious payload within the description field of a user account. The payload is triggered when the mouse cursor is moved over the description field in the list, when generating the little yellow informational pop up box, resulting in Stored Cross Site Scripting Attack.
Published: 2019-08-14T13:44:29.000Z
Updated: 2024-08-04T17:44:16.490Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0334 |
vulnerable | 2026-06-08 05:12:19.717016 |
Details available
When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other sensitive information, leading to Stored Cross Site Scripting.
Published: 2019-08-14T13:48:51.000Z
Updated: 2024-08-04T17:44:16.482Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0333 |
vulnerable | 2026-06-08 05:12:19.716398 |
Details available
In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2, 4.3, the attacker can then query and receive the whole data set instead of just what is part of their authorized security profile, resulting in Information Disclosure.
Published: 2019-08-14T13:47:36.000Z
Updated: 2024-08-04T17:44:16.500Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0332 |
vulnerable | 2026-06-08 05:12:19.715037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0331 |
vulnerable | 2026-06-08 05:12:19.713046 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0326 |
vulnerable | 2026-06-08 05:12:19.699561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0268 |
vulnerable | 2026-06-08 05:12:19.564784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2483 |
vulnerable | 2026-06-08 05:11:37.241907 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2473 |
vulnerable | 2026-06-08 05:11:37.221435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2447 |
vulnerable | 2026-06-08 05:11:37.161822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2445 |
vulnerable | 2026-06-08 05:11:37.159257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2442 |
vulnerable | 2026-06-08 05:11:37.154261 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2432 |
vulnerable | 2026-06-08 05:11:37.118616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.