跳到正文
SecondTuesday

BusinessObjects Business Intelligence Platform

自 2023 年 1 月以来共 5 条安全说明。

优先级依据 CVSS 推算,并非 SAP 的优先级:CVSS 9.0 及以上为严重,7.0 及以上为高,4.0 及以上为中,低于 4.0 为低。SAP 自己的优先级仅见于 SAP for Me(需要 SAP 登录)。

补丁日编号标题优先级(依据 CVSS 推算,并非 SAP 的优先级)CVSS
2023年4月3298961Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management) 严重9.8
2023年3月3287120Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform 中6.5
2023年2月3256787SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network. 高8.4
2023年1月3266006Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console) 严重10.0
2023年1月3262810Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP) 严重9.9