Sap Businessobjects Business Intelligence vulnerabilities

CVE-2022-32245 [HIGH] CWE-319 CVE-2022-32245: SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an un SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the application by an automated attack. Thus, completely compr

CVE-2022-28214 [HIGH] CWE-312 CVE-2022-28214: During an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions 420, During an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions 420, 430, authentication credentials are being exposed in Sysmon event logs. This Information Disclosure could cause a high impact on systems’ Confidentiality, Integrity, and Availability.

CVE-2021-33697 [MEDIUM] CWE-1022 CVE-2021-33697: Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 42 Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.

CVE-2021-33696 [MEDIUM] CWE-79 CVE-2021-33696: SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not s SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a Web site.

CVE-2021-21444 [MEDIUM] CWE-1021 CVE-2021-21444: SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This could, as a result, nullify the added X-Frame-Options header leading to Clickjacking attack.

CVE-2021-21447 [MEDIUM] CWE-79 CVE-2021-21447: SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attac SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored Cross-Site Scripting.

CVE-2019-0335 [MEDIUM] CWE-79 CVE-2019-0335: Under certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management Cons Under certain conditions SAP BusinessObjects Business Intelligence Platform (Central Management Console), versions 4.1, 4.2, 4.3, allows an attacker to store a malicious payload within the description field of a user account. The payload is triggered when the mouse cursor is moved over the description field in the list, when generating the little yello

CVE-2019-0348 [MEDIUM] CWE-319 CVE-2019-0348: SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can access SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.1, 4.2, can access database with unencrypted connection, even if the quality of protection should be encrypted.

CVE-2019-0332 [MEDIUM] CWE-79 CVE-2019-0332: SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an at SAP BusinessObjects Business Intelligence Platform (Info View), versions 4.1, 4.2, 4.3, allows an attacker to give some payload for keyword in the search and it will be executed while search performs its action, resulting in Cross-Site Scripting (XSS) vulnerability.

CVE-2019-0333 [MEDIUM] CVE-2019-0333: In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platf In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2, 4.3, the attacker can then query and receive the whole data set instead of just what is part of their authorized security profile, resulting in Information Disclosure.

CVE-2019-0346 [MEDIUM] CWE-319 CVE-2019-0346: Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Mana Unencrypted communication error in SAP Business Objects Business Intelligence Platform (Central Management Console), version 4.2, leads to disclosure of list of user names and roles imported from SAP NetWeaver BI systems, resulting in Information Disclosure.

CVE-2019-0334 [MEDIUM] CWE-79 CVE-2019-0334: When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), version When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other sensitive information, leading to Stored Cross Site Sc

CVE-2019-0331 [MEDIUM] CVE-2019-0331: Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), version Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure.

CVE-2019-0326 [MEDIUM] CWE-79 CVE-2019-0326: SAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise), versions 4.1, 4.2, 4 SAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise), versions 4.1, 4.2, 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

CVE-2019-0268 [HIGH] CWE-91 CVE-2019-0268: SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an untrusted source.

CVE-2019-0269 [MEDIUM] CWE-79 CVE-2019-0269: SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does not SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

CVE-2018-2483 [MEDIUM] CWE-287 CVE-2018-2483: HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console (CMC) by changing request method.

CVE-2018-2473 [MEDIUM] CVE-2018-2473: SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Inte SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.

CVE-2018-2445 [CRITICAL] CWE-918 CVE-2018-2445: AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to ma AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability.

CVE-2018-2442 [HIGH] CWE-352 CVE-2018-2442: In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelli In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid.