SAP BusinessObjects Web Intelligence 420
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:businessobjects_web_intelligence:420:*:*:*:*:*:*:*
part: a version: 420 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Businessobjects Web Intelligence (e25f339e-5f58-557d-8efa-7ee38f737a17) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-25646 |
vulnerable | 2026-06-08 06:31:23.667829 |
Information Disclosure vulnerability in SAP BusinessObjects Web Intelligence
HIGH (7.7)
Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application.
Published: 2024-04-09T00:47:43.364Z
Updated: 2024-09-28T22:25:36.576Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42476 |
vulnerable | 2026-06-08 06:11:08.141589 |
Cross Site Scripting vulnerability in SAP BusinessObjects Web Intelligence
MEDIUM (6.8)
SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject JavaScript code into Web Intelligence documents which is then executed in the victim’s browser each time the vulnerable page is visited. Successful exploitation can lead to exposure of the data that the user has access to. In the worst case, attacker could access data from reporting databases.
Published: 2023-12-12T00:58:05.617Z
Updated: 2024-08-02T19:23:40.085Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42474 |
vulnerable | 2026-06-08 06:11:08.134924 |
Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Web Intelligence
MEDIUM (6.8)
SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information.
Published: 2023-10-10T01:36:59.916Z
Updated: 2024-09-18T19:08:59.551Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22546 |
vulnerable | 2026-06-08 05:40:54.246231 |
Details available
Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420.
Published: 2022-02-09T22:05:28.000Z
Updated: 2024-08-03T03:14:55.748Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33667 |
vulnerable | 2026-06-08 05:32:12.061560 |
Details available
MEDIUM (4.3)
Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.
Published: 2021-07-14T11:03:26.000Z
Updated: 2024-08-03T23:58:21.924Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.