SAP SE SAP Businessobjects Business Intelligence Platform vulnerabilities, page 2

31 vulnerabilities

Known vulnerabilities in SAP SE SAP Businessobjects Business Intelligence Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6MediumCVE-2024-34684sap_se · sap businessobjects business intelligence platform +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling)On Unix, SAP BusinessObjects Business Intelligence Platform (Scheduling) allows an authenticated attacker with administrator access on the local server to access the password of a local account. As a result, an attacker can obtain non-administrative user credentials, which will allow them to read or modify the remote server files.EPSS0.14%7.1HighCVE-2019-0289sap_se · sap businessobjects business intelligence platform +1 moresap_se sap businessobjects business intelligence platformUnder certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for OLAP), versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted.EPSS1.08%8.1HighCVE-2026-0508sap_se · sap businessobjects business intelligence platform +1 moreOpen Redirect vulnerability in SAP BusinessObjects Business Intelligence PlatformThe SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application. Upon successful exploitation, the victim may click on this malicious URL, resulting in an unvalidated redirect to the attacker-controlled domain and subsequently download the malicious content. This vulnerability has a high impact on the confidentiality and integrity of the application, with no effect on the availability of the application.EPSS0.32%5.4MediumCVE-2026-0502sap_se · sap businessobjects business intelligence platformCross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence PlatformDue to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send unintended requests to the web server. This has low impact on integrity and availability of the application. There is no impact on confidentiality of the data.EPSS0.12%4.1MediumCVE-2026-27683sap_se · sap businessobjects business intelligence platformReflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs. When a victim accesses the URL, the script executes in the user�s browser, potentially exposing restricted information. This results in a low impact on confidentiality with no impact on integrity and availability.EPSS0.28%4.2MediumCVE-2026-24318sap_se · sap businessobjects business intelligence platformInsecure Session Management vulnerability in SAP BusinessObjects Business Intelligence PlatformDue to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session tokens and reuse them to gain unauthorized access to a victim�s session. If the application continues to accept previously issued tokens after authentication, the attacker could assume the victim�s authenticated context. This could allow the attacker to access or modify information within the victim�s session scope, impacting confidentiality and integrity, while availability remains unaffected.EPSS0.17%8.5HighCVE-2023-0020sap_se · sap businessobjects business intelligence platform +1 moresap_se sap businessobjects business intelligence platformSAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, there could be a high impact on confidentiality and limited impact on integrity of the application.EPSS0.52%6.1MediumCVE-2023-31406sap_se · sap businessobjects business intelligence platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence PlatformDue to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.EPSS0.46%7.5HighCVE-2023-36917sap_se · sap businessobjects business intelligence platform +1 morePassword Change rate limit bypass in SAP BusinessObjects Business Intelligence PlatformSAP BusinessObjects Business Intelligence Platform - version 420, 430, allows an unauthorized attacker who had hijacked a user session, to be able to bypass the victim’s old password via brute force, due to unrestricted rate limit for password change functionality. Although the attack has no impact on integrity loss or system availability, this could lead to an attacker to completely takeover a victim’s account.EPSS0.58%6.1MediumCVE-2023-30741sap_se · sap businessobjects business intelligence platform +1 moreCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence PlatformDue to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.EPSS0.39%7.6HighCVE-2023-30740sap_se · sap businessobjects business intelligence platform +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, there could be a high impact on confidentiality, limited impact on integrity and availability of the application.EPSS0.46%