CVE-2020-6196

CVE-2020-6196 affects SAP BusinessObjects Mobile (MobileBIService) 4.2. The vulnerability allows an attacker to generate multiple requests, which can block all threads and cause a Denial of Service (availability impact). The description explicitly ties the issue to resource exhaustion in MobileBI...

The vulnerability of SAP BusinessObjects Business Intelligence platform arises from deficiencies in the encryption of user-input data. This allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of the SAP BusinessObjects Business Intelligence platform exists due to deficiencies in the encryption of data entered by users. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the BI Workspace component of the SAP BusinessObjects Business Intelligence platform arises from deficiencies in the encryption of user-input data. This allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the BI Workspace component of the SAP BusinessObjects Business Intelligence platform exists due to deficiencies in the encryption of data entered by users. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the BILogon/appService.jsp module of the SAP BusinessObjects Business Intelligence platform allows a hacker to execute arbitrary code.

The vulnerability of the BILogon/appService.jsp module of the SAP BusinessObjects Business Intelligence platform exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Central Management Console component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Central Management Console component of the SAP BusinessObjects Business Intelligence platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

The vulnerability of SAP BusinessObjects Business Intelligence platform, which stems from insufficient validation of input data, allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the SAP BusinessObjects Business Intelligence platform exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of protected information through a specially created XML...

The vulnerability of the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of SAP BusinessObjects Business Intelligence’s Web Intelligence component is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the AdminTools component of the SAP BusinessObjects Business Intelligence platform allows a attacker to perform an SSRF attack.

The vulnerability of the AdminTools component of the SAP BusinessObjects Business Intelligence platform relates to insufficient validation of queries at the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

CVE-2019-0395

SAP BusinessObjects Business Intelligence Platform Fiori BI Launchpad, before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability...

CVE-2019-0395

SAP BusinessObjects Business Intelligence Platform Fiori BI Launchpad, before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability...

CVE-2019-0398

Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform Monitoring Application, before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery...

Cross site scripting

SAP BusinessObjects Business Intelligence Platform Fiori BI Launchpad, before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability...

Cross site request forgery (csrf)

Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform Monitoring Application, before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery...

CVE-2019-0398

Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform Monitoring Application, before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery...

CVE-2019-0398

SAP BusinessObjects BI Platform Monitoring Application (versions

CVE-2019-0395

CVE-2019-0395 affects SAP BusinessObjects BI Platform (Fiori BI Launchpad) prior to 4.2. It enables a Stored Cross-Site Scripting (XSS) vulnerability by allowing JavaScript execution in a text module, due to insufficient sanitization/validation of client-side data in the web app. Impact: attacker...

CVE-2019-0395

SAP BusinessObjects Business Intelligence Platform Fiori BI Launchpad, before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability...

SAP Business Objects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2019-46442)

SAP Business Objects Business Intelligence Platform is a suite of bookstore intelligence software and enterprise performance solutions from Germany's SAP. The product features report generation, analytics and data visualization. A cross-site scripting vulnerability exists in SAP BusinessObjects...

SAP Business Objects Business Intelligence Platform CVE-2019-0395 Cross Site Scripting Vulnerability

Description SAP BusinessObjects Business Intelligence Platform is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

SAP BusinessObjects Business Intelligence CVE-2019-0398 Cross Site Request Forgery Vulnerability

Description SAP BusinessObjects Business Intelligence Platform is prone to an unspecified cross-site request-forgery vulnerability because the application fails to properly validate HTTP requests. Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain...