CVE-2020-6237

Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

CVE-2020-6237

Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

PT-2020-19033

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform versions 4.1 through 4.2 Description The issue allows an attacker to access restricted information under certain conditions, leading to information disclosure. This occurs in the dswsbobje we...

CVE-2020-6237: Undefined Security Weakness

Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

CVE-2010-3980

Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI...

PT-2010-5211

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Enterprise XI version 3.2 Description The issue allows remote attackers to enumerate account names by generating different error messages depending on whether the Login field corresponds to a valid username. This can be don...

PT-2010-5212

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Enterprise XI version 3.2 Description The issue allows remote authenticated users to cause a denial of service. This is achieved by requesting a large number of CUIDs via a GenerateCuids SOAPAction to the...

CVE-2010-3980: Undefined Security Weakness

Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI...

CVE-2010-3979: Exposure of Sensitive Information to an Unauthorized Actor

Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid username, which allows remote attackers to enumerate account names via a login SOAPAction to the dswsbobje/services/session URI...