Sap Businessobjects Business Intelligence Platform (Central Management Console)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_businessobjects_business_intelligence_platform_(central_management_console):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Businessobjects Business Intelligence Platform (Central Management Console) (72025128-12d5-5076-be9f-145042bf0ae2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0064 |
vulnerable | 2026-06-08 07:00:29.222413 |
Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)
HIGH (8.7)
Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.
Published: 2025-02-11T00:33:03.769Z
Updated: 2025-02-18T18:07:53.865Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35228 |
vulnerable | 2026-06-08 05:46:04.308647 |
Details available
SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.
Published: 2022-07-12T20:28:40.000Z
Updated: 2024-08-03T09:29:17.463Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.