Sap Se Sap Businessobjects Web Intelligence vulnerabilities

CVE-2024-25646 [HIGH] CWE-732 CVE-2024-25646: Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authentica Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application.

CVE-2023-42476 [MEDIUM] CWE-79 CVE-2023-42476: SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject Jav SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject JavaScript code into Web Intelligence documents which is then executed in the victim’s browser each time the vulnerable page is visited. Successful exploitation can lead to exposure of the data that the user has access to. In the worst case, attacker could

CVE-2023-42474 [MEDIUM] CWE-79 CVE-2023-42474: SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerabl SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information.