SAP SE SAP Businessobjects Business Intelligence vulnerabilities
2 vulnerabilities
Known vulnerabilities in SAP SE SAP Businessobjects Business Intelligence, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2026-58248sap_se · sap businessobjects business intelligenceXML External Entity Injection in SAP BusinessObjects Business IntelligenceSAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external references. When the file is processed as a data source, the affected component resolves these references and exposes the contents of sensitive server-side files within the resulting report. This results in a high impact on confidentiality, with no impact on integrity and availability.EPSS0.44%MediumCVE-2023-39440sap_se · sap businessobjects business intelligence +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence PlatformIn SAP BusinessObjects Business Intelligence - version 420, If a user logs in to a particular program, under certain specific conditions memory might not be cleared up properly, due to which attacker might be able to get access to user credentials. For a successful attack, the attacker needs to have local access to the system. There is no impact on availability and integrity.EPSS0.12%