Langkau ke kandungan
SecondTuesday

Diterjemahkan oleh mesin; mungkin terdapat kesilapan. (Machine-translated; may contain errors.) Baca versi bahasa Inggeris (Read in English)

SAP BusinessObjects BI Platform

47 nota sejak Januari 2023.

Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).

Hari TampalanNotaTajukKeutamaan (diterbitkan daripada CVSS, bukan keutamaan SAP)CVSS
Ogos 20263756565Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server) Tinggi7.9
Ogos 20263753141XML External Entity Injection in SAP BusinessObjects Business Intelligence Sederhana6.5
Ogos 20263770649Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools) Sederhana4.3
Jun 20263687096Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform Sederhana4.3
Jun 20263706000Security Misconfiguration vulnerability in SAP Business Objects Rendah3.7
Mei 20263667593Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform Sederhana5.4
April 20263702191Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform Sederhana4.2
April 20263698216Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform Sederhana4.1
Februari 20263654236Denial of service (DOS) in SAP BusinessObjects BI Platform Tinggi7.5
Februari 20263678282Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform Tinggi7.5
Februari 20263674246Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform Tinggi7.3
Februari 20263695912Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools) Sederhana6.5
Disember 20253651390Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform Sederhana5.4
Julai 20253573199HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) Sederhana4.1
Jun 20253560693Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace) Tinggi8.2
Jun 20253585545Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform Rendah3.7
Mei 20253586013Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW) Tinggi7.9
April 20253565751Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform Sederhana6.6
Mac 20253557469Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) Sederhana5.4
Mac 20253557459Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) Sederhana4.7
Mac 20253549494Information Disclosure in SAP Business Objects Business Intelligence Platform Sederhana4.1
Februari 20253525794Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console) Tinggi8.7
Februari 20253445708Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (BI Launchpad) Sederhana6.1
Januari 20253474398Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform Tinggi8.7
Disember 20243524933Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform Sederhana5.3
Oktober 20243478615Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) Tinggi7.7
September 20243425287DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform Sederhana5.8
Ogos 20243479478Missing Authentication check in SAP BusinessObjects Business Intelligence Platform Kritikal9.8
Ogos 20243433545Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform Sederhana4.3
Jun 20243441817Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling) Rendah3.7
Mei 20243431794Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform Tinggi8.1
Mei 20243449093Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices) Sederhana4.3
September 20233320355Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management) Kritikal9.9
September 20233370490Insufficient File type validation in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) Tinggi8.7
September 20233352453Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System) Sederhana5.3
Ogos 20233317710Binary hijack in SAP BusinessObjects Business Intelligence (Installer) Tinggi7.6
Ogos 20233312586Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform Sederhana4.4
Julai 20233320702Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform Sederhana5.9
Mei 20233307833Information Disclosure in SAP BusinessObjects Intelligence Platform Kritikal9.1
Mei 20233313484Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform Sederhana6.3
Mei 20233309935Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform Sederhana6.1
Mei 20233319400Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform Sederhana6.1
Mei 20233038911Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service) Sederhana5.0
Mei 20233302595Information Disclosure vulnerability in SAP BusinessObjects Platform Rendah3.7
Februari 20233263135SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. Tinggi8.5
Februari 20233263863In SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430, some calls return json with wrong content type in the header of the response. Sederhana4.3
Januari 20233251447Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence) Sederhana4.6