Sap Businessobjects vulnerabilities

22 known vulnerabilities affecting sap/businessobjects.

Total CVEs

22

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL5HIGH6MEDIUM10LOW1

Vulnerabilities

Page 2 of 2

CVE-2010-3981MEDIUMCVSS 4.3v3.22010-10-18

CVE-2010-3981 [MEDIUM] CWE-79 CVE-2010-3981: Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote atta Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to inject arbitrary web script or HTML via the ServiceClass field to the Edit Service Parameters page.

CVE-2010-3982MEDIUMCVSS 5.0v3.22010-10-18

CVE-2010-3982 [MEDIUM] CWE-200 CVE-2010-3982: SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrar SAP BusinessObjects Enterprise XI 3.2 allows remote attackers to trigger TCP connections to arbitrary intranet hosts on any port, and obtain potentially sensitive information about open ports, via the apstoken parameter to the CrystalReports/viewrpt.cwr URI, related to an "internal port scanning" issue.

← Previous2 / 2