SAP SE SAP Businessobjects Business Intelligence Platform (BI Workspace) vulnerabilities
5 vulnerabilities
Known vulnerabilities in SAP SE SAP Businessobjects Business Intelligence Platform (BI Workspace), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-33679sap sesap businessobjects business intelligence platform (bi workspace)+1
EPSS score0.47%
The SAP BusinessObjects BI Platform version - 420 allows an attacker, who has basic access to the application, to inject a malicious script while creating a new module document, file, or folder. When another user visits that page, the stored malicious script will execute in their session, hence allowing the attacker to compromise their confidentiality and integrity.CVE-2022-28216sap sesap businessobjects business intelligence platform (bi workspace)+1EPSS score0.83%
SAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420, is susceptible to a Cross-Site Scripting attack by an unauthenticated attacker due to improper sanitization of the user inputs on the network. On successful exploitation, an attacker can access certain reports causing a limited impact on confidentiality of the application data.CVE-2019-0334sap sesap businessobjects business intelligence platform (bi workspace)+1EPSS score0.69%
When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other sensitive information, leading to Stored Cross Site Scripting.CVE-2019-0331sap sesap businessobjects business intelligence platform (bi workspace)+1EPSS score1.11%
Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure.CVE-2019-0269sap sesap businessobjects business intelligence platform (bi workspace)+1EPSS score0.97%
SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.