Sap Businessobjects Business Intelligence
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_businessobjects_business_intelligence:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Businessobjects Business Intelligence (452969e3-69e8-5c35-9ad3-82a1425601c4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58248 |
vulnerable | 2026-09-16 04:32:42.829734 |
XML External Entity Injection in SAP BusinessObjects Business Intelligence
MEDIUM (6.5)
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external references. When the file is processed as a data source, the affected component resolves these references and exposes the contents of sensitive server-side files within the resulting report. This results in a high impact on confidentiality, with no impact on integrity and availability.
Published: 2026-08-11T00:17:16.740Z
Updated: 2026-08-11T14:29:43.182Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39440 |
vulnerable | 2026-06-08 06:09:37.465819 |
Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform
MEDIUM (4.4)
In SAP BusinessObjects Business Intelligence - version 420, If a user logs in to a particular program, under certain specific conditions memory might not be cleared up properly, due to which attacker might be able to get access to user credentials. For a successful attack, the attacker needs to have local access to the system. There is no impact on availability and integrity.
Published: 2023-08-08T00:49:17.862Z
Updated: 2024-10-08T16:25:51.455Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.