Businessobjects Business Intelligence Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:-:*:*:*
part: a version: 2025 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Businessobjects Business Intelligence Platform (a3c0e562-4ca7-57ca-9f31-6b0635368433) |
| Edition | * |
| Language | * |
| Software edition | - |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-25245 |
vulnerable | 2026-06-08 07:12:50.884179 |
Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
MEDIUM (5.4)
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a limited impact on confidentiality and integrity within the scope of victim�s browser. There is no impact on availability.
Published: 2025-03-11T00:34:56.115Z
Updated: 2025-03-11T02:10:07.773Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0064 |
vulnerable | 2026-06-08 07:00:29.223235 |
Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)
HIGH (8.7)
Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.
Published: 2025-02-11T00:33:03.769Z
Updated: 2025-02-18T18:07:53.865Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0061 |
vulnerable | 2026-06-08 07:00:29.215822 |
Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
HIGH (8.7)
SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application.
Published: 2025-01-14T00:09:21.343Z
Updated: 2025-01-14T14:58:33.186Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0060 |
vulnerable | 2026-06-08 07:00:29.215191 |
Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
MEDIUM (6.5)
SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can read sensitive information from the server and send it to the attacker. The attacker could further use this information to impersonate as a high privileged user causing high impact on confidentiality and integrity of the application.
Published: 2025-01-14T00:09:14.051Z
Updated: 2025-01-14T14:59:23.756Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32732 |
vulnerable | 2026-06-08 06:37:23.744306 |
Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform
MEDIUM (5.3)
Under certain conditions SAP BusinessObjects Business Intelligence platform allows an attacker to access information which would otherwise be restricted.This has low impact on Confidentiality with no impact on Integrity and Availability of the application.
Published: 2024-12-10T00:11:33.815Z
Updated: 2024-12-10T17:14:19.976Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.