Vulnerabilities (CVE)

Filtered by vendor Sap Subscribe

Filtered by product Businessobjects Business Intelligence

CVSS v3 Filter

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Search

Total 2 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2023-37490	1 Sap	1 Businessobjects Business Intelligence	2023-08-09	N/A	9.0 CRITICAL
SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the confidentiality, integrity, and availability of the system
CVE-2018-2445	1 Sap	1 Businessobjects Business Intelligence	2018-10-15	5.5 MEDIUM	9.6 CRITICAL
AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability.