SAP SE SAP Businessobjects Business Intelligence Platform (Web Intelligence) vulnerabilities

5 vulnerabilities

Known vulnerabilities in SAP SE SAP Businessobjects Business Intelligence Platform (Web Intelligence), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.1CVE-2025-31326sap sesap businessobjects business intelligence platform (web intelligence)
EPSS score
0.28%
SAP�BusinessObjects Business�Intelligence Platform (Web Intelligence) is vulnerable to HTML Injection, allowing an attacker with basic user privileges to inject malicious code into specific input fields. This could lead to unintended redirects or manipulation of application behavior, such as redirecting users to attacker-controlled domains. This issue primarily affects the integrity of the system. However, the confidentiality and availability of the system remain unaffected.6.1CVE-2025-25245sap sesap businessobjects business intelligence platform (web intelligence)+1
EPSS score
0.24%
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a limited impact on confidentiality and integrity within the scope of victim�s browser. There is no impact on availability.7.7CVE-2024-37179sap sesap businessobjects business intelligence platform (web intelligence)+1
EPSS score
0.43%
SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application.6.5CVE-2019-0333sap sesap businessobjects business intelligence platform (web intelligence)+1
EPSS score
1.14%
In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2, 4.3, the attacker can then query and receive the whole data set instead of just what is part of their authorized security profile, resulting in Information Disclosure.5.4CVE-2019-0382sap sesap businessobjects business intelligence platform (web intelligence)+1
EPSS score
0.53%
A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pages); corrected in version 4.2. Privileges are required in order to exploit this vulnerability.