SAP SE SAP Business Objects vulnerabilities

3 vulnerabilities

Known vulnerabilities in SAP SE SAP Business Objects, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2018-2408sap_sesap business objects+1
EPSS score
1.54%
Improper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI Launchpad/Fiorified BI Launchpad. In case of password change for a user, all other active sessions created using older password continues to be active.5.4CVE-2022-31598sap_sesap business objects+1
EPSS score
0.24%
Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.3.7CVE-2026-44743sap_sesap business objects
EPSS score
0.30%
Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a low impact on the confidentiality of the data. There is no impact on integrity and availability of the application.