1286 matches found
CVE-2022-27667
Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
The vulnerability of the SAP BusinessObjects Content Administrator Workbench administration tool lies in the redirection of the URL during page loading, allowing an attacker to disclose sensitive information.
The vulnerability of the SAP BusinessObjects Content Administrator Workbench reporting administration tool is related to the redirection of the URL to an unreliable website when loading the entry page. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...
The vulnerability of SAP BusinessObjects Business Intelligence platform, related to incorrect coding or filtering of output data, allows a perpetrator to execute an SSRF attack.
The vulnerability of SAP BusinessObjects Business Intelligence platform is related to incorrect coding or filtering of output data. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...
Vulnerabilities fixed in SAP Software
SAP has fixed multiple vulnerabilities in several products, including SAP Solution Manager, SAP jConnect, SAP Web Dispatcher, SAP NetWeaver, SAP S/4 HANA Private Cloud, and SAP BusinessObjects. The vulnerabilities include code injection, deserialization, and insufficient input validation, which c...
SAP BusinessObjects Business Intelligence Platform DoS (December 2025)
The version of SAP BusinessObjects Business Intelligence Platform installed on the remote host is affected by a denial of service vulnerability as disclosed in the SAP Security Patch Day December 2025: - SAP Business Objects allows an unauthenticated attacker to flood the service due to improper...
EUVD-2025-201846
SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrit...
CVE-2025-42896 Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform
SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrit...
CVE-2025-42896
CVE-2025-42896 affects SAP BusinessObjects Business Intelligence Platform and is an SSRF vulnerability where an unauthenticated remote attacker can send crafted requests via the URL parameter controlling the login page error message. The server may fetch attacker-supplied URLs, yielding low impac...
SAP BusinessObjects Business Intelligence Platform 安全漏洞
SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...
CVE-2025-42896: Improper Encoding or Escaping of Output
SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrit...
PT-2025-51478
Уязвимость платформы бизнес-аналитики SAP BusinessObjects Business Intelligence связана с неправильным кодированием или экранированием выходных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, осуществить SSRF-атаку...
SAP BusinessObjects Business Intelligence Platform Deserialization (3617142)
The version of SAP BusinessObjects Business Intelligence Platform installed on the remote host is prior to 2025 SP000 000500, 4.3 SP004 001400, or 4.3 SP005 000200. It is, therefore, affected by a vulnerability as referenced in the 3617142 advisory. - Improper Input Validation vulnerability in...
EUVD-2019-1155
Malware in sbrugna...
EUVD-2021-20356
Malware in sbrugna...
EUVD-2019-1169
Malware in sbrugna...
EUVD-2019-1106
Malware in sbrugna...
EUVD-2019-1107
Malware in sbrugna...
EUVD-2019-1099
Malware in sbrugna...