SAP Businessobjects Business Intelligence vulnerabilities

3 vulnerabilities

Known vulnerabilities in SAP Businessobjects Business Intelligence, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2018-2446sapbusinessobjects_business_intelligence+1
EPSS score
1.72%
Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (server name), hence leading to an information disclosure.8.8CVE-2018-2442sapbusinessobjects_business_intelligence+2
EPSS score
0.69%
In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid.6.5CVE-2018-2447sapbusinessobjects_business_intelligence+1
EPSS score
1.23%
SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database.