Sap Businessobjects Business Intelligence Platform (Cmc)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_businessobjects_business_intelligence_platform_(cmc):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Businessobjects Business Intelligence Platform (Cmc) (b33842a8-7b45-5aef-a069-686519bb5c79) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-39014 |
vulnerable | 2026-06-08 05:47:17.635191 |
Details available
Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted.
Published: 2022-09-13T15:43:47.000Z
Updated: 2024-08-03T11:10:32.320Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0352 |
vulnerable | 2026-06-08 05:12:19.754031 |
Details available
In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.
Published: 2019-09-10T16:03:38.000Z
Updated: 2024-08-04T17:44:16.501Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0335 |
vulnerable | 2026-06-08 05:12:19.718744 |
Details available
Under certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management Console), versions 4.1, 4.2, 4.3, allows an attacker to store a malicious payload within the description field of a user account. The payload is triggered when the mouse cursor is moved over the description field in the list, when generating the little yellow informational pop up box, resulting in Stored Cross Site Scripting Attack.
Published: 2019-08-14T13:44:29.000Z
Updated: 2024-08-04T17:44:16.490Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.