SAP BusinessObjects Business Intelligence 430
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:businessobjects_business_intelligence:430:*:*:*:*:*:*:*
part: a version: 430 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Businessobjects Business Intelligence (5b68eb46-86d2-5203-8a64-0fbdf2fe6941) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-37179 |
vulnerable | 2026-06-08 06:39:46.819364 |
Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
HIGH (7.7)
SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application.
Published: 2024-10-08T03:21:02.936Z
Updated: 2024-10-08T14:10:11.275Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40622 |
vulnerable | 2026-06-08 06:11:04.011408 |
Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management)
CRITICAL (9.9)
SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, under certain condition allows an authenticated attacker to view sensitive information which is otherwise restricted. On successful exploitation, the attacker can completely compromise the application causing high impact on confidentiality, integrity, and availability.
Published: 2023-09-12T02:03:05.907Z
Updated: 2024-09-28T22:11:29.586Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37490 |
vulnerable | 2026-06-08 06:08:15.501528 |
Binary hijack in SAP BusinessObjects Business Intelligence (Installer)
HIGH (7.6)
SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the confidentiality, integrity, and availability of the system
Published: 2023-08-08T00:46:14.512Z
Updated: 2024-08-02T17:16:30.325Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37489 |
vulnerable | 2026-06-08 06:08:15.500092 |
Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)
MEDIUM (5.3)
Due to the lack of validation, SAP BusinessObjects Business Intelligence Platform (Version Management System) - version 403, permits an unauthenticated user to read the code snippet through the UI, which leads to low impact on confidentiality and no impact on the application's availability or integrity.
Published: 2023-09-12T00:55:46.173Z
Updated: 2024-09-26T14:46:51.880Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36917 |
vulnerable | 2026-06-08 06:08:14.679794 |
Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform
MEDIUM (5.9)
SAP BusinessObjects Business Intelligence Platform - version 420, 430, allows an unauthorized attacker who had hijacked a user session, to be able to bypass the victim’s old password via brute force, due to unrestricted rate limit for password change functionality. Although the attack has no impact on integrity loss or system availability, this could lead to an attacker to completely takeover a victim’s account.
Published: 2023-07-11T02:48:10.677Z
Updated: 2024-10-23T16:22:25.493Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31406 |
vulnerable | 2026-06-08 06:04:43.042972 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31404 |
vulnerable | 2026-06-08 06:04:43.040810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30741 |
vulnerable | 2026-06-08 06:04:40.887268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30740 |
vulnerable | 2026-06-08 06:04:40.886762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28765 |
vulnerable | 2026-06-08 06:02:35.418827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28762 |
vulnerable | 2026-06-08 06:02:35.394549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27896 |
vulnerable | 2026-06-08 05:57:42.431473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27894 |
vulnerable | 2026-06-08 05:57:42.429096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41206 |
vulnerable | 2026-06-08 05:48:29.993749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39800 |
vulnerable | 2026-06-08 05:47:18.804710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35296 |
vulnerable | 2026-06-08 05:46:04.557150 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32245 |
vulnerable | 2026-06-08 05:44:43.067398 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32244 |
vulnerable | 2026-06-08 05:44:43.065687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28214 |
vulnerable | 2026-06-08 05:42:44.226466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33697 |
vulnerable | 2026-06-08 05:32:12.172243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33696 |
vulnerable | 2026-06-08 05:32:12.171009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21444 |
vulnerable | 2026-06-08 05:29:12.034651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.