Sap Businessobjects Business Intelligence Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:sap_businessobjects_business_intelligence_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Sap Businessobjects Business Intelligence Platform (4aee0720-83c8-58ac-9957-52fcd17b2a6e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-0015 |
vulnerable | 2026-06-08 05:52:03.935751 |
Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence)
MEDIUM (4.6)
In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.
Published: 2023-01-10T03:05:47.922Z
Updated: 2025-04-09T13:57:34.512Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2483 |
vulnerable | 2026-06-08 05:11:37.241757 |
Details available
HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console (CMC) by changing request method.
Published: 2018-11-13T20:00:00.000Z
Updated: 2024-08-05T04:21:33.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2472 |
vulnerable | 2026-06-08 05:11:37.219157 |
Details available
SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2018-10-09T13:00:00.000Z
Updated: 2024-08-05T04:21:34.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2471 |
vulnerable | 2026-06-08 05:11:37.218594 |
Details available
Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted.
Published: 2018-10-09T13:00:00.000Z
Updated: 2024-08-05T04:21:34.150Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-2445 |
vulnerable | 2026-06-08 05:11:37.159184 |
Details available
AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability.
Published: 2018-08-14T16:00:00.000Z
Updated: 2024-08-05T04:21:33.632Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.