Businessobjects Business Intelligence Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:-:*:*:*
part: a version: 430 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Businessobjects Business Intelligence Platform (a3c0e562-4ca7-57ca-9f31-6b0635368433) |
| Edition | * |
| Language | * |
| Software edition | - |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0061 |
vulnerable | 2026-06-08 07:00:29.215796 |
Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
HIGH (8.7)
SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application.
Published: 2025-01-14T00:09:21.343Z
Updated: 2025-01-14T14:58:33.186Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0060 |
vulnerable | 2026-06-08 07:00:29.214508 |
Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
MEDIUM (6.5)
SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can read sensitive information from the server and send it to the attacker. The attacker could further use this information to impersonate as a high privileged user causing high impact on confidentiality and integrity of the application.
Published: 2025-01-14T00:09:14.051Z
Updated: 2025-01-14T14:59:23.756Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45281 |
vulnerable | 2026-06-08 06:45:55.811710 |
DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform
MEDIUM (5.8)
SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The attacker needs to have local access to the vulnerable system to perform DLL related tasks. This could result in a high impact on confidentiality and integrity of the application.
Published: 2024-09-10T04:32:43.378Z
Updated: 2024-09-16T16:17:11.239Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33004 |
vulnerable | 2026-06-08 06:37:25.009028 |
Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)
MEDIUM (4.3)
SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see the sensitive information through cache and can open the pages causing limited impact on Confidentiality, Integrity and Availability of the application.
Published: 2024-05-14T04:00:25.081Z
Updated: 2024-09-28T22:29:25.011Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28165 |
vulnerable | 2026-06-08 06:33:26.629888 |
Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform
HIGH (8.1)
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application
Published: 2024-05-14T03:51:20.267Z
Updated: 2025-12-16T18:13:24.520Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.