Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_businessobjects_web_intelligence:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Businessobjects Web Intelligence (818fab83-66b5-513f-a66e-cb0aa264014c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25646 vulnerable 2026-06-08 06:31:23.666738 Information Disclosure vulnerability in SAP BusinessObjects Web Intelligence
HIGH (7.7)
Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application.
Published: 2024-04-09T00:47:43.364Z
Updated: 2024-09-28T22:25:36.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42476 vulnerable 2026-06-08 06:11:08.141408 Cross Site Scripting vulnerability in SAP BusinessObjects Web Intelligence
MEDIUM (6.8)
SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject JavaScript code into Web Intelligence documents which is then executed in the victim’s browser each time the vulnerable page is visited. Successful exploitation can lead to exposure of the data that the user has access to. In the worst case, attacker could access data from reporting databases.
Published: 2023-12-12T00:58:05.617Z
Updated: 2024-08-02T19:23:40.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42474 vulnerable 2026-06-08 06:11:08.134125 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Web Intelligence
MEDIUM (6.8)
SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information.
Published: 2023-10-10T01:36:59.916Z
Updated: 2024-09-18T19:08:59.551Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.