Approved changes feed: RSS · Atom

cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.1:*:*:*:*:*:*:*

part: a version: 4.1 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductBusinessobjects Business Intelligence Platform (a3c0e562-4ca7-57ca-9f31-6b0635368433)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-0398 vulnerable 2026-06-08 05:12:19.866410 Details available
Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery.
Published: 2019-12-11T21:35:01.000Z
Updated: 2024-08-04T17:51:26.079Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0378 vulnerable 2026-06-08 05:12:19.810603 Details available
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before version 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the file name of the background image resulting in Stored Cross-Site Scripting.
Published: 2019-10-08T19:25:44.000Z
Updated: 2024-08-04T17:51:26.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0377 vulnerable 2026-06-08 05:12:19.809985 Details available
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the input controls, resulting in Stored Cross-Site Scripting.
Published: 2019-10-08T19:24:50.000Z
Updated: 2024-08-04T17:51:26.707Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.