CVE-2025-2794

creationtimestamp| type| source ---|---|--- 2025-03-31 16:33:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9689 2025-03-31 21:43:28+00:00| seen| https://t.me/cvedetector/21644 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:56+00:00| seen|...

SAP Business Objects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2025-07541)

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. SAP Business Objects Business Intelligence Platform suffers from a cross-site scripting vulnerability that stems from the application's lack of effective...

PT-2025-10669

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform Web Intelligence affected versions not specified Description The issue concerns a deprecated web application endpoint that is not properly secured, allowing an attacker to inject a malicious U...

CVE-2025-23185: Generation of Error Message Containing Sensitive Information

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they...

PT-2025-10664

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform affected versions not specified Description The issue is related to improper error handling, which reveals technical details of the application in exceptions and stack traces. An attacker wit...

CVE-2025-25245: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform Web Intelligence contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a...

CVE-2025-0062: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform allows an attacker to inject JavaScript code in Web Intelligence reports. This code is then executed in the victim's browser each time the vulnerable page is visited by the victim. On successful exploitation, an attacker could cause limited impac...

CVE-2025-25949

creationtimestamp| type| source ---|---|--- 2025-03-03 01:29:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6126 2025-03-03 02:58:43+00:00| seen| https://t.me/cvedetector/19280 2025-08-19 18:29:28+00:00| seen| MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18...

CVE-2025-1786

creationtimestamp| type| source ---|---|--- 2025-03-01 10:27:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6070 2025-03-01 12:16:03+00:00| seen| https://t.me/cvedetector/19228 2025-03-02 11:46:58+00:00| seen| Telegram/vdRzNlP426m6lJFCKYmqSHAel4wRmXumX0Kn4OWneuONNAR...

CVE-2025-24843

creationtimestamp| type| source ---|---|--- 2025-02-28 19:32:16+00:00| seen| https://t.me/cvedetector/19163 2025-02-28 22:27:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6015 2025-03-02 11:45:38+00:00| seen| Telegram/YhrIuRaaxOvic-tltQtazPDeUyYDoUK7zsc0lz6DbDNlsexr 2025-08-22...

SAP BusinessObjects Business Intelligence Platform 安全漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...

CVE-2025-0060

SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can read sensitive information from the server and send it to the attacker. The attacker could further use this information to impersonate as a high privileged...

CVE-2025-0061: Exposure of Sensitive System Information to an Unauthorized Control Sphere

SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application...

CVE-2025-0060: Improper Control of Generation of Code

SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can read sensitive information from the server and send it to the attacker. The attacker could further use this information to impersonate as a high privileged...

PT-2025-3741

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform affected versions not specified Description The issue allows an authenticated user with restricted access to inject malicious JavaScript code, which can read sensitive information from the...

CVE-2024-32732: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Under certain conditions SAP BusinessObjects Business Intelligence platform allows an attacker to access information which would otherwise be restricted.This has low impact on Confidentiality with no impact on Integrity and Availability of the application...

PT-2025-10662

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform affected versions not specified Description The issue allows an attacker to inject JavaScript code in Web Intelligence reports, which is then executed in the victim's browser when the vulnerab...

Intruder Launches Intel: A Free Vulnerability Intelligence Platform For Staying Ahead of the Latest Threats

When CVEs go viral, separating critical vulnerabilities from the noise is essential to protecting your organization. That's why Intruder, a leader in attack surface management, built Intel now known ascvemon - a free vulnerability intelligence platform designed to help you act fast and prioritize...

The vulnerability of the SAP Business Objects Business Intelligence Platform lies in its ability to download files of a dangerous type without limit, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

CVE-2024-37179: Unrestricted Upload of File with Dangerous Type

SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application...