Sap Businessobjects Business Intelligence vulnerabilities

CVE-2018-2442 [HIGH] CWE-352 CVE-2018-2442: In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelli In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid.

CVE-2018-2446 [HIGH] CVE-2018-2446: Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticate Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (server name), hence leading to an information disclosure.

CVE-2018-2447 [MEDIUM] CWE-89 CVE-2018-2447: SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attac SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database.