Lucene search
+L

1130 matches found

CNVD
CNVD
added 2018/10/12 12:0 a.m.7 views

SAP BusinessObjects BI Platform Servers Information Disclosure Vulnerability

SAP BusinessObjects Business Intelligence BI Platform Servers is a suite of business intelligence software and enterprise performance solutions from SAP. The product has a report generation, analysis, data visualization, etc. Software Development Kit SDK is one of the software development kit. An...

5.3CVSS5.2AI score0.01372EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/10/10 12:0 a.m.8 views

SAP BusinessObjects Business Intelligence Platform Information Disclosure Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. An information disclosure vulnerability exists in SAP BusinessObjects...

7.5CVSS7.2AI score0.01728EPSS
SaveExploits0References1
OSV
OSV
added 2018/10/09 1:29 p.m.8 views

CVE-2018-2472

SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 Web Intelligence DHTML client does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS5.8AI score0.01325EPSS
SaveExploits0References3
NVD
NVD
added 2018/10/09 1:29 p.m.18 views

CVE-2018-2467

In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web Browser such as Chrome the system returns an error with the path of the used application server...

5.3CVSS5.2AI score0.01372EPSS
SaveExploits0References3
NVD
NVD
added 2018/10/09 1:29 p.m.25 views

CVE-2018-2471

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted...

7.5CVSS7.4AI score0.01728EPSS
SaveExploits0References3
NVD
NVD
added 2018/10/09 1:29 p.m.22 views

CVE-2018-2472

SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 Web Intelligence DHTML client does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6.1CVSS6AI score0.01325EPSS
SaveExploits0References3
OSV
OSV
added 2018/10/09 1:29 p.m.11 views

CVE-2018-2471

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted...

7.5CVSS5.8AI score0.01728EPSS
SaveExploits0References3
Prion
Prion
added 2018/10/09 1:29 p.m.25 views

Cross site scripting

SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 Web Intelligence DHTML client does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

4.3CVSS6AI score0.01325EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2018/10/09 1:29 p.m.25 views

Path traversal

In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web Browser such as Chrome the system returns an error with the path of the used application server...

5CVSS5.3AI score0.01372EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2018/10/09 1:29 p.m.23 views

Authentication flaw

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted...

5CVSS7.4AI score0.01728EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/10/09 1:0 p.m.22 views

CVE-2018-2467

In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web Browser such as Chrome the system returns an error with the path of the used application server...

5.2AI score0.01372EPSS
SaveExploits0References3
CVE
CVE
added 2018/10/09 1:0 p.m.52 views

CVE-2018-2471

CVE-2018-2471 affects SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20. The connected sources describe an information disclosure vulnerability that could allow an attacker to access information that would otherwise be restricted. The provided documents do not specify the underlyin...

7.5CVSS7.3AI score0.01728EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2018/10/09 1:0 p.m.48 views

CVE-2018-2472

CVE-2018-2472 affects SAP BusinessObjects BI Platform (4.10 and 4.20) via the Web Intelligence DHTML client. The underlying issue is improper encoding of user-controlled inputs, leading to a Cross-Site Scripting (XSS) vulnerability. Communicating documents confirm the affected product and the roo...

6.1CVSS6AI score0.01325EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/10/09 1:0 p.m.24 views

CVE-2018-2472

SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 Web Intelligence DHTML client does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

6AI score0.01325EPSS
SaveExploits0References3
CVE
CVE
added 2018/10/09 1:0 p.m.62 views

CVE-2018-2467

SAP BusinessObjects BI Platform Servers SDK (versions 4.1 and 4.2) is affected by an information-disclosure vulnerability where a specially crafted URL in a web browser can cause the server to return the path to the application server. The issue appears tied to the Software Development Kit compon...

5.3CVSS5.2AI score0.01372EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/10/09 1:0 p.m.29 views

CVE-2018-2471

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted...

7.4AI score0.01728EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/08/28 12:0 a.m.7 views

SAP BusinessObjects Business Intelligence Platform Admin Tools Information Disclosure Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product features report generation, analysis, data visualization, etc. Admin Tools is one of the management tools. An information disclosure...

5.3CVSS5.1AI score0.01355EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/08/28 12:0 a.m.7 views

SAP BusinessObjects Business Intelligence SQL Injection Vulnerability

SAP BusinessObjects Business Intelligence is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. A SQL injection vulnerability exists in SAP BusinessObjects Business...

6.5CVSS7.1AI score0.01249EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/08/28 12:0 a.m.9 views

SAP BusinessObjects Business Intelligence Admin Tools Server-Side Request Forgery Vulnerability

SAP BusinessObjects Business Intelligence is a suite of business intelligence software and enterprise performance solutions from SAP. The product features report generation, analysis, data visualization, etc. Admin Tools is one of the management tools. A server-side request forgery vulnerability...

9.6CVSS9.4AI score0.01086EPSS
SaveExploits0References1
OSV
OSV
added 2018/08/14 4:29 p.m.9 views

CVE-2018-2447

SAP BusinessObjects Business Intelligence Launchpad Web Intelligence, version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database...

6.5CVSS5.9AI score0.01249EPSS
SaveExploits0References3
Rows per page
Query Builder