Sap Businessobjects Business Intelligence Platform (Web Intelligence)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_businessobjects_business_intelligence_platform_(web_intelligence):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Businessobjects Business Intelligence Platform (Web Intelligence) (a1820b9c-0e56-5a10-8e2e-89cf499bf7e1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-31326 |
vulnerable | 2026-06-08 07:17:02.746615 |
HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
MEDIUM (4.1)
SAP�BusinessObjects Business�Intelligence Platform (Web Intelligence) is vulnerable to HTML Injection, allowing an attacker with basic user privileges to inject malicious code into specific input fields. This could lead to unintended redirects or manipulation of application behavior, such as redirecting users to attacker-controlled domains. This issue primarily affects the integrity of the system. However, the confidentiality and availability of the system remain unaffected.
Published: 2025-07-08T00:34:21.578Z
Updated: 2025-07-08T16:14:46.644Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25245 |
vulnerable | 2026-06-08 07:12:50.882610 |
Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
MEDIUM (5.4)
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a limited impact on confidentiality and integrity within the scope of victim�s browser. There is no impact on availability.
Published: 2025-03-11T00:34:56.115Z
Updated: 2025-03-11T02:10:07.773Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37179 |
vulnerable | 2026-06-08 06:39:46.816972 |
Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
HIGH (7.7)
SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application.
Published: 2024-10-08T03:21:02.936Z
Updated: 2024-10-08T14:10:11.275Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0382 |
vulnerable | 2026-06-08 05:12:19.820841 |
Details available
A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pages); corrected in version 4.2. Privileges are required in order to exploit this vulnerability.
Published: 2019-11-13T21:59:11.000Z
Updated: 2024-08-04T17:51:26.301Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0333 |
vulnerable | 2026-06-08 05:12:19.716351 |
Details available
In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2, 4.3, the attacker can then query and receive the whole data set instead of just what is part of their authorized security profile, resulting in Information Disclosure.
Published: 2019-08-14T13:47:36.000Z
Updated: 2024-08-04T17:44:16.500Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.