CVE-2017-6061: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Securit...

PT-2017-16871

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Financial Consolidation version 10.0.0.1933 Description A cross-site scripting XSS issue exists in the help component, allowing remote attackers to inject arbitrary web script or HTML via a GET request to the...

SAP BusinessObjects Financial Consolidation Cross-Site Scripting Vulnerability

The SAP BusinessObjects portfolio offers a wide range of business intelligence software, information management software, enterprise performance management solutions, and regulatory, risk, and compliance solutions. financial Consolidation is an enterprise performance management product. A...

SAP BusinessObjects BI Platform Remote Command Execution Vulnerability

SAP BusinessObjects BI Platform is the German SAP SAP company's set of business intelligence BI solution platform. A remote command execution vulnerability exists in SAP BusinessObjects BI Platform, which can be exploited by an attacker to execute arbitrary commands with elevated privileges, and ...

SAP BusinessObjects Information Disclosure Vulnerability

The SAP BusinessObjects portfolio offers a wide range of business intelligence software, information management software, enterprise performance management solutions, and regulatory, risk, and compliance solutions. An information disclosure vulnerability exists in SAP Business Objects, which coul...

SAP BusinessObjects Cross-Site Forged Request Vulnerability

SAP BusinessObjects is the business intelligence product of SAP, including SAP BusinessObjects Enterprises and Crystal Reports, Webintelligence, Crystal Dashboard Design, SAP BusinessObjects Edge solutions, and more. A cross-site forged request vulnerability exists in SAP BusinessObjects due to...

Unspecified Cross-Site Scripting Vulnerability in SAP BusinessObjects BI Platform

SAP BusinessObjects BI Platform is the German SAP SAP company's set of business intelligence BI solution platform. An unspecified cross-site scripting vulnerability exists in SAP BusinessObjects BI Platform. Because the program does not adequately filter user-supplied input, an attacker could...

SAP BusinessObjects Mobile - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application SAP BusinessObjects Mobile published at the 'play' market has multiple vulnerabilities...

Out-of-bounds

SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI BOXI 3.1 R3 allow remote attackers to cause a denial of service out-of-bounds read and listener crash via a crafted GIOP packet, aka SAP Security Note 2001108...

CVE-2015-7730

SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI BOXI 3.1 R3 allow remote attackers to cause a denial of service out-of-bounds read and listener crash via a crafted GIOP packet, aka SAP Security Note 2001108...

CVE-2015-7730

CVE-2015-7730 affects SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3. A crafted GIOP packet can trigger an out-of-bounds read and listener crash, enabling remote denial of service. The entry documents this as SAP Security Note 2001108. Exploita...

CVE-2015-7730: Improper Restriction of Operations within the Bounds of a Memory Buffer

SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI BOXI 3.1 R3 allow remote attackers to cause a denial of service out-of-bounds read and listener crash via a crafted GIOP packet, aka SAP Security Note 2001108...

PT-2015-2432

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI Platform version 4.1 BusinessObjects Edge version 4.0 BusinessObjects XI BOXI version 3.1 R3 Description The issue allows remote attackers to cause a denial of service via a crafted GIOP packet, resulting in an...

CVE-2015-2076

The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395...

CVE-2015-2075

SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396...

CVE-2015-2076

The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395...

CVE-2015-2075

SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396...

Design/Logic Flaw

SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396...

Design/Logic Flaw

The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395...

CVE-2015-2075

SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396...