Approved changes feed: RSS · Atom

cpe:2.3:a:sap:business_objects_business_intelligence_platform:440:*:*:*:*:*:*:*

part: a version: 440 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductBusiness Objects Business Intelligence Platform (da63f5e9-fa3d-59a6-8db0-5d9518b23abd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42375 vulnerable 2026-06-08 06:43:56.555047 Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
MEDIUM (4.3)
SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application.
Published: 2024-08-13T04:03:26.192Z
Updated: 2024-12-10T06:22:12.114Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41731 vulnerable 2026-06-08 06:43:55.045260 Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
LOW (3.1)
SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application.
Published: 2024-08-13T04:07:28.131Z
Updated: 2024-12-10T06:23:32.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28166 vulnerable 2026-06-08 06:33:26.631341 Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
LOW (3.7)
SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application.
Published: 2024-08-13T04:05:24.442Z
Updated: 2024-12-10T06:22:53.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28165 vulnerable 2026-06-08 06:33:26.627969 Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform
HIGH (8.1)
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application
Published: 2024-05-14T03:51:20.267Z
Updated: 2025-12-16T18:13:24.520Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.