CVE-2023-23856

SAP BusinessObjects Business Intelligence Platform (Web Intelligence UI) version 430 is affected by a cross-site scripting (XSS) vulnerability due to some API responses returning JSON with an incorrect Content-Type header. This specific issue enables a custom application that directly calls the W...

CVE-2023-0018

Due to improper input sanitization of user-controlled input in SAP BusinessObjects Business Intelligence Platform CMC application - versions 420, and 430, an attacker with basic user-level privileges can modify/upload crystal reports containing a malicious payload. Once these reports are viewable...

CVE-2022-39014

CVE-2022-39014 affects SAP BusinessObjects BI Platform Central Management Console (CMC) 430. The issue is an information-disclosure vulnerability: under certain conditions an attacker could access unencrypted sensitive parameters that should be restricted. The public documents indicate the root c...