PT-2021-8379

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Edge version 4.1 Description The issue allows remote attackers to obtain the SI PLATFORM SEARCH SERVER LOGON TOKEN token, which can lead to gaining SYSTEM privileges. This is achieved through vectors involving CORBA calls...

CVE-2014-9320: Improper Authentication

SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SIPLATFORMSEARCHSERVERLOGONTOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905...

CVE-2015-2074: Improper Limitation of a Pathname to a Restricted Directory

The File Repository Server FRS CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681...

PT-2021-8387

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Edge version 4.0 Description The issue allows remote attackers to read arbitrary files via a full pathname. This is related to the File Repository Server FRS CORBA listener. Recommendations For SAP BusinessObjects Edge...

CVE-2015-2073: Improper Limitation of a Pathname to a Restricted Directory

The File RepositoRy Server FRS CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP Note 2018682...

SAP BusinessObjects Business Intelligence Platform Installed

Binary data sapbusinessobjectsintelligenceplatformwininstalled.nbin...

SAP BusinessObjects Business Intelligence Platform Clickjacking (2935791)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by a vulnerability. SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably...

SAP BusinessObjects Business Intelligence Platform Web Detection.

Binary data sapbusinessobjectsintelligenceplatform.nbin...

SAP BusinessObjects Business Intelligence Platform SSRF Vulnerability (direct check)

Binary data sapbusinessobjectsintelligenceplatformcve-2020-6308.nbin...

SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2021-03700)

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and deploy...

CVE-2021-21447

SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored...

CVE-2021-21447

SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored...

CVE-2021-21447

SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored...

Cross site scripting

SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored...

CVE-2021-21447

SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored...

PT-2021-14515

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence platform versions 410, 420 Description The issue allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control. This can be executed by a...

CVE-2021-21447: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored...

Exploit for Server-Side Request Forgery in Sap Businessobjects_Business_Intelligence_Platform

CVE-2020-6308 SAP POC !Follow on Twitterhttps://img.shields...

CVE-2020-26831

SAP BusinessObjects BI Platform Crystal Report, versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file...

Server side request forgery (ssrf)

SAP BusinessObjects BI Platform Crystal Report, versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file...