CVE-2019-0287

3 documents3 sources

Severity

7.6HIGH

EPSS

0.5%

top 34.50%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SAP SE SAP Businessobjects Business Intelligence Platform (central Management Server)SAP Businessobjects

Timeline

PublishedMay 14

Latest updateMay 24

Description

Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server), versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:LExploitability: 2.8 | Impact: 4.7

Affected Packages2 packages

▶CVEListV5sap_se/sap_businessobjects_business_intelligence_platform_(central_management_server)< 4.2+1

▶NVDsap/businessobjects4.2, 4.3+1

🔴Vulnerability Details

GHSA

GHSA-xh63-pmfx-3pr8: Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server), versions 4↗2022-05-24

▶

CVEList

CVE-2019-0287: Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server), versions 4↗2019-05-14

▶