SAP Business Objects Business Intelligence Platform 420
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:business_objects_business_intelligence_platform:420:*:*:*:*:*:*:*
part: a version: 420 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Business Objects Business Intelligence Platform (da63f5e9-fa3d-59a6-8db0-5d9518b23abd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-42375 |
vulnerable | 2026-06-08 06:43:56.554966 |
Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
MEDIUM (4.3)
SAP BusinessObjects Business Intelligence
Platform allows an authenticated attacker to upload malicious code over the
network, that could be executed by the application. On successful exploitation,
the attacker can cause a low impact on the Integrity of the application.
Published: 2024-08-13T04:03:26.192Z
Updated: 2024-12-10T06:22:12.114Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42478 |
vulnerable | 2026-06-08 06:11:08.146518 |
Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
HIGH (7.5)
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when opened by any other user could lead to high impact on integrity of the application.
Published: 2023-12-12T00:58:53.443Z
Updated: 2024-08-02T19:23:39.646Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25617 |
vulnerable | 2026-06-08 05:56:09.522593 |
OS Command Execution vulnerability in SAP Business Objects Business Intelligence Platform (Adaptive Job Server)
CRITICAL (9)
SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the public java SDK. Programs could impact the confidentiality, integrity and availability of the system.
Published: 2023-03-14T04:42:40.759Z
Updated: 2025-02-27T18:07:16.954Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25616 |
vulnerable | 2026-06-08 05:56:09.521239 |
Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)
CRITICAL (9.9)
In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
Published: 2023-03-14T04:41:28.901Z
Updated: 2025-02-27T18:09:04.335Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0015 |
vulnerable | 2026-06-08 05:52:03.936736 |
Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence)
MEDIUM (4.6)
In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.
Published: 2023-01-10T03:05:47.922Z
Updated: 2025-04-09T13:57:34.512Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41267 |
vulnerable | 2026-06-08 05:48:30.105823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41263 |
vulnerable | 2026-06-08 05:48:30.089869 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39015 |
vulnerable | 2026-06-08 05:47:17.637692 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39013 |
vulnerable | 2026-06-08 05:47:17.633028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32246 |
vulnerable | 2026-06-08 05:44:43.069899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31598 |
vulnerable | 2026-06-08 05:43:41.156471 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24398 |
vulnerable | 2026-06-08 05:41:00.256621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.