SAP BusinessObjects Business Intelligence Platform 4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.0:*:*:*:*:*:*:*
part: a version: 4.0 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Businessobjects Business Intelligence Platform (a3c0e562-4ca7-57ca-9f31-6b0635368433) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-0396 |
vulnerable | 2026-06-08 05:12:19.864614 |
Details available
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly filtered by Web Intelligence HTML interface in some specific workflows.
Published: 2019-11-13T22:18:04.000Z
Updated: 2024-08-04T17:51:26.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0378 |
vulnerable | 2026-06-08 05:12:19.810582 |
Details available
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before version 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the file name of the background image resulting in Stored Cross-Site Scripting.
Published: 2019-10-08T19:25:44.000Z
Updated: 2024-08-04T17:51:26.339Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0377 |
vulnerable | 2026-06-08 05:12:19.807410 |
Details available
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the input controls, resulting in Stored Cross-Site Scripting.
Published: 2019-10-08T19:24:50.000Z
Updated: 2024-08-04T17:51:26.707Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0376 |
vulnerable | 2026-06-08 05:12:19.806694 |
Details available
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which can be executed later by the victim, resulting in Stored Cross-Site Scripting.
Published: 2019-10-08T19:23:56.000Z
Updated: 2024-08-04T17:51:26.103Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0375 |
vulnerable | 2026-06-08 05:12:19.805850 |
Details available
SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the export dialog box of the report name resulting in reflected Cross-Site Scripting.
Published: 2019-10-08T19:22:26.000Z
Updated: 2024-08-04T17:51:26.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0374 |
vulnerable | 2026-06-08 05:12:19.800120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.