Businessobjects@4.2 Security Vulnerabilities and Issues — Businessobjects@4.2 CVE List

Lucene search

SapBusinessobjects4.2

5 matches found

CVE•added 2019/06/14 7:29 p.m.•284 views

CVE-2019-0303

SAP BusinessObjects Business Intelligence Platform (Administration Console), versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...

6.1CVSS6.3AI score0.00275EPSS

CVE•added 2019/05/14 9:29 p.m.•51 views

CVE-2019-0287

Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server), versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted.

7.6CVSS7.3AI score0.00498EPSS

CVE•added 2019/05/14 9:29 p.m.•48 views

CVE-2019-0289

Under certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP), versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted.

7.1CVSS6.7AI score0.00288EPSS

CVE•added 2019/02/15 6:29 p.m.•47 views

CVE-2019-0259

SAP BusinessObjects, versions 4.2 and 4.3, (Visual Difference) allows an attacker to upload any file (including script files) without proper file format validation.

9.8CVSS9.3AI score0.00725EPSS

CVE•added 2019/02/15 6:29 p.m.•37 views

CVE-2019-0251

The Fiori Launchpad of SAP BusinessObjects, before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

6.1CVSS6AI score0.00333EPSS