BusinessObjects Business Intelligence Platform
5 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| April 2023 | 3298961 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management) | Critical | 9.8 |
| March 2023 | 3287120 | Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform | Medium | 6.5 |
| February 2023 | 3256787 | SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network. | High | 8.4 |
| January 2023 | 3266006 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console) | Critical | 10.0 |
| January 2023 | 3262810 | Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP) | Critical | 9.9 |