CVE-2020-6211: URL Redirection to Untrusted Site

SAP Business Objects Business Intelligence Platform AdminTools, versions 4.1, 4.2, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability...

CVE-2020-6195: Cleartext Transmission of Sensitive Information

SAP Business Objects Business Intelligence Platform CMC, version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure. It involves social engineering in order to gain access to system and If password is known, it would give administrative rights to the attacker to...

CVE-2020-6208: Use After Free

SAP Business Objects Business Intelligence Platform Crystal Reports, versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus allowing the attacker to control the behaviour of the application, leading to Remote Code Execution...

PT-2020-2770

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform Crystal Reports versions 4.1, 4.2 Description The issue allows an attacker with basic authorization to inject code that can be executed by the application, leading to Remote Code Execution...

SAP Business Objects Business Intelligence Platform Information Disclosure Vulnerability (CNVD-2020-12765)

SAP Business Objects Business Intelligence Platform is a suite of bookstore intelligence software and enterprise performance solutions from Germany's SAP. The product features report generation, analytics and data visualization. An information disclosure vulnerability exists in SAP Business Objec...

CVE-2020-6189

Certain settings pages in SAP Business Objects Business Intelligence Platform CMC, version 4.2, generates error messages that can give enterprise private-network related information which would otherwise be restricted leading to Information Disclosure...

Information disclosure

Certain settings pages in SAP Business Objects Business Intelligence Platform CMC, version 4.2, generates error messages that can give enterprise private-network related information which would otherwise be restricted leading to Information Disclosure...

CVE-2020-6189: Generation of Error Message Containing Sensitive Information

Certain settings pages in SAP Business Objects Business Intelligence Platform CMC, version 4.2, generates error messages that can give enterprise private-network related information which would otherwise be restricted leading to Information Disclosure...

PT-2020-18992

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform CMC version 4.2 Description The issue concerns certain settings pages in the SAP Business Objects Business Intelligence Platform CMC that generate error messages. These error messages can...

Command Execution Vulnerability in CBoard

CBoard is a self-help BI data analysis platform led by Shanghai Chugo Information Technology Co. CBoard has a command execution vulnerability that can be exploited by attackers to execute malicious code...

TheTHE - Simple, Shareable, Team-Focused And Expandable Threat Hunting Experience

TheTHE is an environment intended to help analysts and hunters over the early stages of their work in an easier, unified and quicker way. One of the major drawbacks when dealing with a hunting is the collection of information available on a high number of sources, both public and private. All thi...

SAP Business Objects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2019-46442)

SAP Business Objects Business Intelligence Platform is a suite of bookstore intelligence software and enterprise performance solutions from Germany's SAP. The product features report generation, analytics and data visualization. A cross-site scripting vulnerability exists in SAP BusinessObjects...

SAP Business Objects Business Intelligence Platform Cross-Site Request Forgery Vulnerability

SAP Business Objects Business Intelligence Platform is a suite of bookstore intelligence software and enterprise performance solutions from Germany's SAP. The product features report generation, analytics and data visualization. A cross-site request forgery vulnerability exists in SAP...

PT-2019-11233

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform Fiori BI Launchpad versions prior to 4.2 Description: The issue allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting. Recommendations:...

PT-2019-11234

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform Monitoring Application versions prior to 4.1 SAP BusinessObjects Business Intelligence Platform Monitoring Application versions prior to 4.2 SAP BusinessObjects Business Intelligence Platform...

CVE-2019-0395: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform Fiori BI Launchpad, before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability...

CVE-2019-0398: Cross-Site Request Forgery (CSRF)

Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform Monitoring Application, before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery...

CVE-2019-0396: Improper Input Validation

SAP BusinessObjects Business Intelligence Platform Web Intelligence HTML interface, corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly...

CVE-2019-0382: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform Web Intelligence-Publication related pages; corrected in version 4.2. Privileges are required in order to exploit this vulnerability...

PT-2019-4460

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform versions prior to 4.1 SAP BusinessObjects Business Intelligence Platform version 4.2 is not affected by this issue as it is mentioned to be corrected in versions 4.1 and 4.2, implying version...