BB
Product
Businessobjects Business Intelligence
45
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 4High 12Medium 29Low 0
Watch
Add Businessobjects Business Intelligence to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-41203 | 8.8 | Nov 8 | In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated attacker with low privileges can intercept a serialized object… Affected: 4.2; 4.3 |
| CVE-2018-2442 | 8.8 | Aug 14 | In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP… Affected: 4.0; 4.1; 4.2 |
| CVE-2018-2427 | 8.8 | Jul 10 | SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code… Affected: 4.10; 4.20 |
| CVE-2022-32245 | 8.2 | Aug 9 | SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the… Affected: 420; 430 |
| CVE-2019-0268 | 8.1 | Mar 12 | SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an untrusted source Affected: 4.1; 4.2; 4.3 |
| CVE-2022-28214 | 7.8 | May 11 | During an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions 420, 430, authentication credentials are being exposed in Sysmon event logs Affected: 420; 430 |
| CVE-2025-23192 | 7.6 | Jun 10 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace) Affected: 430; 2025; 2027 |
| CVE-2023-30740 | 7.6 | May 9 | SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted Affected: 420; 430 |
| CVE-2023-36917 | 7.5 | Jul 11 | SAP BusinessObjects Business Intelligence Platform - version 420, 430, allows an unauthorized attacker who had hijacked a user session, to be able to bypass the victim’s old… Affected: 420; 430 |
| CVE-2023-27896 | 7.5 | Mar 14 | In SAP BusinessObjects Business Intelligence Platform - version 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own CMS,… Affected: 420; 430 |
| CVE-2018-2446 | 7.5 | Aug 14 | Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (server name), hence leading to an… Affected: 4.1; 4.2 |
| CVE-2023-28762 | 7.2 | May 9 | SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token of any logged-in BI… Affected: 420; 430 |
Showing 12