Sap Businessobjects Business Intelligence vulnerabilities, page 3
45 vulnerabilities
Known vulnerabilities in Sap Businessobjects Business Intelligence, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2023-27896sap · businessobjects_business_intelligence +1 moreServer Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platformIn SAP BusinessObjects Business Intelligence Platform - version 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own CMS, leading to a high impact on availability.EPSS0.52%CriticalCVE-2023-28762sap_se · sap businessobjects intelligence platform +1 moreInformation Disclosure in SAP BusinessObjects Intelligence PlatformSAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token of any logged-in BI user over the network without any user interaction. The attacker can impersonate any user on the platform resulting into accessing and modifying data. The attacker can also make the system partially or entirely unavailable.EPSS0.71%CriticalCVE-2023-28765sap · businessobjects_business_intelligence +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, can get access to lcmbiar file and further decrypt the file. After this attacker can gain access to BI user’s passwords and depending on the privileges of the BI user, the attacker can perform operations that can completely compromise the application.EPSS14.94%MediumCVE-2023-30741sap_se · sap businessobjects business intelligence platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence PlatformDue to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.EPSS0.39%HighCVE-2023-30740sap_se · sap businessobjects business intelligence platform +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, there could be a high impact on confidentiality, limited impact on integrity and availability of the application.EPSS0.46%