SAP BusinessObjects Business Intelligence 4.3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:businessobjects_business_intelligence:4.3:*:*:*:*:*:*:*

part: a version: 4.3 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductBusinessobjects Business Intelligence (5b68eb46-86d2-5203-8a64-0fbdf2fe6941)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-41203 vulnerable 2026-06-08 05:48:29.983031 Details available
CRITICAL (9.9)
In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated attacker with low privileges can intercept a serialized object in the parameters and substitute with another malicious serialized object, which leads to deserialization of untrusted data vulnerability. This could highly compromise the Confidentiality, Integrity, and Availability of the system.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-05-01T17:49:02.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0335 vulnerable 2026-06-08 05:12:19.718839 Details available
Under certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management Console), versions 4.1, 4.2, 4.3, allows an attacker to store a malicious payload within the description field of a user account. The payload is triggered when the mouse cursor is moved over the description field in the list, when generating the little yellow informational pop up box, resulting in Stored Cross Site Scripting Attack.
Published: 2019-08-14T13:44:29.000Z
Updated: 2024-08-04T17:44:16.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0334 vulnerable 2026-06-08 05:12:19.717036 Details available
When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other sensitive information, leading to Stored Cross Site Scripting.
Published: 2019-08-14T13:48:51.000Z
Updated: 2024-08-04T17:44:16.482Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0332 vulnerable 2026-06-08 05:12:19.715058 Details available
SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an attacker to give some payload for keyword in the search and it will be executed while search performs its action, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2019-08-14T13:44:00.000Z
Updated: 2024-08-04T17:44:16.487Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0331 vulnerable 2026-06-08 05:12:19.713080 Details available
Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure.
Published: 2019-08-14T13:43:15.000Z
Updated: 2024-08-04T17:44:16.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0326 vulnerable 2026-06-08 05:12:19.699684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0268 vulnerable 2026-06-08 05:12:19.565437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2432 vulnerable 2026-06-08 05:11:37.119243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.