1646 matches found
Information disclosure
Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
CVE-2022-28216
CVE-2022-28216 concerns SAP BusinessObjects BI Platform (BI Workspace) v420, where an unauthenticated attacker can trigger a cross-site scripting (XSS) vulnerability due to improper user-input sanitization over the network. Exploitation could allow an attacker to access certain reports, implying ...
CVE-2022-22541
Technical details beyond the SAP BusinessObjects disclosure description are not provided in the connected documents. No explicit root cause, affected components, or mitigations are listed. Monitor for updates and official advisories.
CVE-2022-22541
SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shouldn't or don't need to have access...
Microsoft Power BI Spoofing Vulnerability
...
Vulnerability fixed in Microsoft Power BI
Microsoft has fixed a vulnerability in the Power BI Gateway. The vulnerability occurs when multiple users simultaneously using the gateway, causing the gateway to mixes sessions. A malicious party could potentially exploit this vulnerability to gain access to sensitive data. Abuse is not easy. Th...
KLA12510 Spoofing vulnerability in Microsoft SQL Server
A spoofing vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2022-23292 Related products Microsoft-Power-BI CVE list CVE-2022-23292 warning KB list Solution Install necessary updates from the KB section...
fribidi 缓冲区错误漏洞
fribidi is an open source implementation of a bi-directional Unicode algorithm. A security vulnerability exists in fribidi that stems from FriBidi incorrectly handling input strings resulting in memory corruption. An attacker could exploit this vulnerability to cause FriBidi to crash, resulting i...
VulnCheck KEV: CVE-2019-2616
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass...
Oracle BI Publisher Unauthorized Access Vulnerability
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass...
CVE-2022-24398
Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which would otherwise be restricted...
CVE-2022-24398
SAP BusinessObjects BI Platform versions 4.2 (420) and 4.3 (430) are affected by an information disclosure vulnerability under certain conditions that can be exploited by an authenticated attacker to access restricted information. The issue is documented across multiple sources as CVE-2022-24398....
The vulnerability of the Power BI visualization application’s JavaScript SDK lies in the ability to disclose information in erroneous data fields, allowing an attacker to disclose protected information.
The vulnerability of the Power BI visualization application’s JavaScript SDK relates to the disclosure of information in the erroneous data range. Exploiting this vulnerability could allow an attacker to disclose protected information remotely...
Microsoft Power BI Information Disclosure Vulnerability (CNVD-2022-23481)
Microsoft Power BI is an interactive data visualization software from Microsoft Corporation USA, with a primary focus on business intelligence. It is part of Microsoft Power Platform. Microsoft Power BI has an information disclosure vulnerability, and no details of the vulnerability are currently...
CVE-2022-22546
Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence BI Launchpad - version 420...
CVE-2022-22546
Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence BI Launchpad - version 420...
CVE-2022-22546
SAP Business Objects Web Intelligence (BI Launchpad) 420 is affected by CVE-2022-22546 due to improper HTML encoding in input control summary, enabling an authorized attacker to perform cross-site scripting (XSS). CVSSv3.1 base score 5.4 (MEDIUM). Exploitation details are not elaborated beyond th...
CVE-2022-23254
Microsoft Power BI Information Disclosure Vulnerability...