Business Objects Business Intelligence Platform vulnerabilities
7 known vulnerabilities in Business Objects Business Intelligence Platform from SAP. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
SAP BusinessObjects Business Intelligence…: Missing Authorization
In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can fully compromise the system resulting in High impact on confi
- 9.3 Critical severity
SAP BusinessObjects Business Intelligence…: Improper Neutralization of Input During Web Page Generation
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application
- 7.6 High severity
Business Objects BI Platform: Improper Neutralization of Input During Web Page Generation
SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when opened by any other user could lead to high impact on integrity of the application.
- 8.8 High severity
Business Objects (Adaptive Job Server): Improper Neutralization of Special Elements used in an OS Command
SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console o
- 8.8 High severity
Business Objects Business Intelligence…: Improper Neutralization of Special Elements in Output Used by a Downstream Component
In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. S
- 8.8 High severity
BusinessObjects Business Intelligence Platform: Unrestricted Upload of File with Dangerous Type
SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/replace any file on Business Objects server at the operating system level, enabling the attacker to take full control of the system causing a hig
- 7.6 High severity
SAP BusinessObjects Business Intelligence…: Exposure of Sensitive Information to an Unauthorized Actor
Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system data and make the system unavailable leading to high impact on confidentiality and low impact on integri