CVE-2018-2473 — SAP Businessobjects Business Intelligence Platform Server vulnerability

3 documents3 sources

Severity

6.5MEDIUMNVD

EPSS

0.5%

top 35.65%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SAP Businessobjects Business Intelligence Platform Server SAP Businessobjects Business Intelligence

Timeline

PublishedNov 13

Latest updateMay 13

Description

SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5sap/sap_businessobjects_business_intelligence_platform_server= 4.1, = 4.2+1

▶NVDsap/businessobjects_business_intelligence4.1, 4.2+1

🔴Vulnerability Details

GHSA

GHSA-5j3r-2r5c-vf28: SAP BusinessObjects Business Intelligence Platform Server, versions 4↗2022-05-13

▶

CVEList

CVE-2018-2473: SAP BusinessObjects Business Intelligence Platform Server, versions 4↗2018-11-13

▶