CVE-2019-0251: Improper Neutralization of Input During Web Page Generation

The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

PT-2019-1771

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects versions 4.2 and 4.3 Description The issue is related to the lack of proper file format validation, allowing an attacker to upload any file, including script files. This can potentially lead to the execution of arbitrary co...

SAP BusinessObjects Business Intelligence Platform Server Denial of Service Vulnerability

SAP BusinessObjects Business Intelligence Platform Servers is a suite of business intelligence software and enterprise performance solutions. The product features report generation, analytics, data visualization, and more. A denial of service vulnerability exists in SAP BusinessObjects Business...

SAP BusinessObjects Business Intelligence Platform BI CMC Security Bypass Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product has a report generation, analysis, data visualization, etc. BI CMC is one of the central management console program. A security...

SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from Germany's SAP, which features report generation, analytics, data visualization, and more. A cross-site scripting vulnerability in SAP BusinessObjects Business...

CVE-2018-2483

HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console CMC by changing request method...

Design/Logic Flaw

SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

Cross site scripting

SAP BusinessObjects Business Intelligence Platform BIWorkspace, versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2018-2479

SAP BusinessObjects Business Intelligence Platform BIWorkspace, versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2018-2473

SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2018-2479

SAP BusinessObjects Business Intelligence Platform BIWorkspace, versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2018-2473

SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2018-2479

SAP BusinessObjects Business Intelligence Platform BIWorkspace, versions 4.1 and 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

CVE-2018-2473

CVE-2018-2473 affects SAP BusinessObjects Business Intelligence Platform Server (versions 4.1 and 4.2) when using Web Intelligence Rich Client 3-tier gateway. The vulnerability enables an attacker to prevent legitimate users from accessing a service, either by crashing or flooding it, implying a ...

CVE-2018-2479

SAP BusinessObjects BI Platform (BIWorkspace) versions 4.1 and 4.2 have a Cross-Site Scripting (XSS) vulnerability caused by insufficient encoding of user-controlled inputs in the web UI. Root cause: inadequate encoding/escaping before rendering user input. Impact: XSS is possible when interactin...

CVE-2018-2483

SAP BusinessObjects BI Platform CMC (versions 4.1 and 4.2) is affected by HTTP Verb Tampering caused by how request methods can be manipulated. Vulnerable component: Central Management Console. Reported impact includes bypassing security restrictions and tampering with HTTP verbs. No explicit exp...

CVE-2018-2483

HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console CMC by changing request method...

PT-2018-15589

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform Server versions 4.1 and 4.2 Description The issue allows an attacker to prevent legitimate users from accessing a service by either crashing or flooding it, specifically when Web Intelligence...

PT-2018-15598

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform versions 4.1 through 4.2 Description The issue allows for HTTP Verb Tampering in the Central Management Console CMC by changing the request method. Recommendations For SAP BusinessObjects...

PT-2018-15595

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform BIWorkspace versions 4.1 and 4.2 Description The issue is related to insufficient encoding of user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. Recommendations For version...