bi-ahaus.de Cross Site Scripting vulnerability OBB-2653331

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross site scripting

BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. Exploit is possible only when the bttoken in victim’s session is active...

CVE-2020-6220

BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. Exploit is possible only when the bttoken in victim’s session is active...

CVE-2020-6220

The CVE-2020-6220 issue affects SAP BusinessObjects BI Platform, specifically BI Launchpad and CMC, versions 4.1 and 4.2. Affected component(s) are parts that process user input, where insufficient encoding of user-controlled inputs leads to a Cross‑Site Scripting (XSS) vulnerability. The exploit...

JetBrains IntelliJ IDEA has an unspecified vulnerability (CNVD-2022-55673)

JetBrains IntelliJ IDEA is a suite of integrated development environments for the Java language from Czech company Jetbrains. security vulnerability exists in versions of JetBrains IntelliJ IDEA prior to 2022.1, which stems from an insufficient notification mechanism for using Unicode...

CVE-2022-23292

Microsoft Power BI Spoofing Vulnerability...

CVE-2022-23292

Microsoft Power BI Spoofing Vulnerability...

CVE-2022-23292

Microsoft Power BI Spoofing Vulnerability...

Spoofing

Microsoft Power BI Spoofing Vulnerability...

CVE-2022-23292 Microsoft Power BI Spoofing Vulnerability

...

CVE-2022-23292 Microsoft Power BI Spoofing Vulnerability

...

CVE-2022-23292

CVE-2022-23292 corresponds to a spoofing vulnerability in Microsoft Power BI affecting the Power BI Gateway (On-Premises Data Gateway). Connected sources indicate that the issue arises from how the gateway handles multiple concurrent user sessions, potentially allowing a malicious party to spoof ...

SAP BusinessObjects Business Intelligence platform信息泄露漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP Germany. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly...

Microsoft Power BI Spoofing Vulnerability

Microsoft Power BI is an interactive data visualization software from Microsoft USA that focuses on business intelligence. It is part of the Microsoft Power Platform. A spoofing vulnerability exists in Microsoft Power BI. An attacker can exploit this vulnerability to conduct spoofing attacks...

CVE-2022-27667

Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

CVE-2022-28216

SAP BusinessObjects Business Intelligence Platform BI Workspace - version 420, is susceptible to a Cross-Site Scripting attack by an unauthenticated attacker due to improper sanitization of the user inputs on the network. On successful exploitation, an attacker can access certain reports causing ...

CVE-2022-28213

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS...

CVE-2022-22541

SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shouldn't or don't need to have access...

Cross site scripting

SAP BusinessObjects Business Intelligence Platform BI Workspace - version 420, is susceptible to a Cross-Site Scripting attack by an unauthenticated attacker due to improper sanitization of the user inputs on the network. On successful exploitation, an attacker can access certain reports causing ...

Information disclosure

SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shouldn't or don't need to have access...