cbcvebase.
CVE-2019-0398
published 2019-12-11

CVE-2019-0398: Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to…

high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery.

Affected

6 ranges
VendorProductVersion rangeFixed in
sapbusinessobjects_business_intelligence_platform
sapbusinessobjects_business_intelligence_platform
sapbusinessobjects_business_intelligence_platform
sap_sesap_businessobjects_business_intelligence_platform
sap_sesap_businessobjects_business_intelligence_platform
sap_sesap_businessobjects_business_intelligence_platform