Sap Business Objects Business Intelligence Platform (Web Intelligence Html Interface)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_business_objects_business_intelligence_platform_(web_intelligence_html_interface):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Business Objects Business Intelligence Platform (Web Intelligence Html Interface) (38796fc5-d7fa-5f40-ae27-f9ddf2339e46) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-6288 |
vulnerable | 2026-06-08 05:26:45.010269 |
Details available
MEDIUM (4.6)
SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) allows an attacker with edit document rights to upload any file (including script files) without proper file format validation leading to Unrestricted upload of file with dangerous type vulnerability. The attacker can modify some formulas and display erroneous content. The server is not affected only the current user browser session, that can easily be closed.
Published: 2020-09-09T12:52:41.000Z
Updated: 2024-08-04T08:55:22.418Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6231 |
vulnerable | 2026-06-08 05:26:44.849750 |
Details available
MEDIUM (5.4)
SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2020-04-14T18:32:57.000Z
Updated: 2024-08-04T08:55:22.155Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6226 |
vulnerable | 2026-06-08 05:26:44.804576 |
Details available
MEDIUM (5.4)
SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2020-04-14T18:33:26.000Z
Updated: 2024-08-04T08:55:22.196Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.