Approved changes feed: RSS · Atom

cpe:2.3:a:businessobjects:webintelligence:2.7.3:*:*:*:*:*:*:*

part: a version: 2.7.3 update: *

VendorBusinessobjects (0cfb67b8-1121-5a61-86e1-9ba3d99b8b9e)
ProductWebintelligence (bce61607-aab4-5f26-a5c0-ecfe98a969f8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-0534 vulnerable 2026-06-03 14:26:35.804320 Details available
Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.
Published: 2005-04-14T04:00:00.000Z
Updated: 2024-08-08T00:24:26.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0533 vulnerable 2026-06-03 14:26:35.803256 Details available
Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.
Published: 2005-04-14T04:00:00.000Z
Updated: 2024-08-08T00:24:25.824Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.