Sap Businessobjects Business Intelligence Platform (Web Intelligence Html Interface)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_businessobjects_business_intelligence_platform_(web_intelligence_html_interface):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Businessobjects Business Intelligence Platform (Web Intelligence Html Interface) (5fdcd675-74dc-5d13-a10a-c2a35a0bdbdf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-42472 |
vulnerable | 2026-06-08 06:11:08.129632 |
Insufficient File type validation in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
HIGH (8.7)
Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application.
Published: 2023-09-12T01:58:32.439Z
Updated: 2024-09-26T14:44:15.752Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21447 |
vulnerable | 2026-06-08 05:29:12.046794 |
Details available
MEDIUM (5.4)
SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored Cross-Site Scripting.
Published: 2021-01-12T14:40:43.000Z
Updated: 2024-08-03T18:16:22.247Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6312 |
vulnerable | 2026-06-08 05:26:45.107228 |
Details available
MEDIUM (5.4)
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), versions - 4.1, 4.2, allows an attacker with a non-administrative user account that can edit certain web page properties, can modify how a browser processes particular page elements, leading to stored Cross Site Scripting. In certain situations, when a user accesses an affected web page element, the attacker will be able to access or modify metadata for which they are not authorized.
Published: 2020-09-09T12:40:12.000Z
Updated: 2024-08-04T08:55:22.413Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6222 |
vulnerable | 2026-06-08 05:26:44.789876 |
Details available
MEDIUM (5.4)
SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2020-04-14T18:18:10.000Z
Updated: 2024-08-04T08:55:22.147Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0396 |
vulnerable | 2026-06-08 05:12:19.864580 |
Details available
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly filtered by Web Intelligence HTML interface in some specific workflows.
Published: 2019-11-13T22:18:04.000Z
Updated: 2024-08-04T17:51:26.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0378 |
vulnerable | 2026-06-08 05:12:19.810550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0377 |
vulnerable | 2026-06-08 05:12:19.807370 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0376 |
vulnerable | 2026-06-08 05:12:19.806661 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0375 |
vulnerable | 2026-06-08 05:12:19.805811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0374 |
vulnerable | 2026-06-08 05:12:19.797294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.