PT-2022-24998 · Sap · Sap Businessobjects Bi Launchpad

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects BI LaunchPad versions 420, 430 Description: The issue is related to improper sanitization of user inputs, allowing an unauthenticated attacker to execute scripts. This can lead to viewing or modifying information, causing ...

The vulnerability of the Lifecycle Management console component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to gain unauthorized access to protected information, change passwords, or import files into another system.

The vulnerability of the Lifecycle Management console component of the SAP BusinessObjects Business Intelligence platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, change...

The vulnerability of the Central Management Console (CMC) component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to disclose protected information or cause service interruptions.

The vulnerability of the Central Management Console CMC component of the SAP BusinessObjects Business Intelligence platform is related to the possibility of manipulating inter-site queries. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause...

CVE-2022-39014

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

CVE-2022-39014

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

CVE-2022-39014

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

Design/Logic Flaw

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

CVE-2022-39014

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console CMC - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted...

PT-2022-24670 · Sap · Sap Businessobjects Business Intelligence Platform Central Management Console

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform Central Management Console CMC version 430 Description: The issue allows an attacker to access certain unencrypted sensitive parameters under certain conditions, which would otherwise be...

SAP BusinessObjects Business Intelligence Platform 安全漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and deploy...

SAP BusinessObjects Business Intelligence Platform 信息泄露漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...

PT-2022-22694 · Sap · Sap Businessobjects Business Intelligence Platform +1

Name of the Vulnerable Software and Affected Versions: SAP Host Agent SAPOSCOL version 7.22 SAP BusinessObjects Business Intelligence Platform versions 420, 430 Description: The issue allows an attacker to escalate privileges for themselves by utilizing files created by saposcol under certain...

The vulnerability of the SAP BusinessObjects BW Publisher Service software integration platform lies in the lack of commas in the syntax of elements or search paths, which allows attackers to exploit this to increase their privileges.

The vulnerability of the SAP BusinessObjects BW Publisher Service software integration platform is related to the absence of commas in the syntax of elements or search paths. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of SAP BusinessObjects Business Intelligence platform, related to information disclosure, allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP BusinessObjects Business Intelligence platform is related to the disclosure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

SAP BusinessObjects Business Intelligence Platform 4.2 < 4.2 SP9 P9 / 4.3 < 4.3 SP2 P5 Multiple Vulnerabilities

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.2 SP9 P9, 4.3 SP2 P5 or 4.3 SP3. It is, therefore, affected by multiple vulnerabilities vulnerabilities: - An unauthenticated, remote attacker can view any data available for a...

CVE-2022-32245

SAP BusinessObjects Business Intelligence Platform Open Document - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the...

CVE-2022-32245

SAP BusinessObjects Business Intelligence Platform Open Document - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the...

Design/Logic Flaw

SAP BusinessObjects Business Intelligence Platform Open Document - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the...

CVE-2022-32245

SAP BusinessObjects Business Intelligence Platform Open Document - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the...

CVE-2022-32245

CVE-2022-32245 affects SAP BusinessObjects Business Intelligence Platform (Open Document) versions 4.2.0x and 4.3.x (420–430). The root cause is an information-disclosure vulnerability that allows an unauthenticated attacker to retrieve plaintext data over the network, enabling viewing any data f...