Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_business_objects_business_intelligence_platform_(cmc_and_bi_launchpad):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Business Objects Business Intelligence Platform (Cmc And Bi Launchpad) (1804029d-7690-57e6-9b41-93af6b73b30e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21444 vulnerable 2026-06-08 05:29:12.032320 Details available
MEDIUM (5.4)
SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This could, as a result, nullify the added X-Frame-Options header leading to Clickjacking attack.
Published: 2021-02-09T20:44:22.000Z
Updated: 2024-08-03T18:16:22.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6257 vulnerable 2026-06-08 05:26:44.930291 Details available
MEDIUM (5.4)
SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad) 4.2 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability.
Published: 2020-05-12T17:53:05.000Z
Updated: 2024-08-04T08:55:22.255Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.