BusinessObjects Business Intelligence Platform
自 2023 年 1 月以来共 5 条安全说明。
优先级依据 CVSS 推算,并非 SAP 的优先级:CVSS 9.0 及以上为严重,7.0 及以上为高,4.0 及以上为中,低于 4.0 为低。SAP 自己的优先级仅见于 SAP for Me(需要 SAP 登录)。
| 补丁日 | 编号 | 标题 | 优先级(依据 CVSS 推算,并非 SAP 的优先级) | CVSS |
|---|---|---|---|---|
| 2023年4月 | 3298961 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management) | 严重 | 9.8 |
| 2023年3月 | 3287120 | Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform | 中 | 6.5 |
| 2023年2月 | 3256787 | SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network. | 高 | 8.4 |
| 2023年1月 | 3266006 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console) | 严重 | 10.0 |
| 2023年1月 | 3262810 | Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP) | 严重 | 9.9 |