CVE-2024-41730

In SAP BusinessObjects Business IntelligencePlatform, if Single Signed On is enabled on Enterprise authentication, anunauthorized user can get a logon token using a REST endpoint. The attacker canfully compromise the system resulting in High impact on confidentiality,integrity and availability.

CVE-2024-41731

SAP BusinessObjects Business IntelligencePlatform allows an authenticated attacker to upload malicious code over thenetwork, that could be executed by the application. On successful exploitation,the attacker can cause a low impact on the Integrity of the application.

CVE-2024-42375

SAP BusinessObjects Business IntelligencePlatform allows an authenticated attacker to upload malicious code over thenetwork, that could be executed by the application. On successful exploitation,the attacker can cause a low impact on the Integrity of the application.

CVE-2024-28166

SAP BusinessObjects Business IntelligencePlatform allows an authenticated attacker to upload malicious code over thenetwork, that could be executed by the application. On successfulexploitation, the attacker can cause a low impact on the Integrity of theapplication.