SAP BusinessObjects Business Intelligence Platform 4.1 Service Pack 10

CPE Details

SAP BusinessObjects Business Intelligence Platform 4.1 Service Pack 10
sap
businessobjects_business_intelligence_platform
4.1
2020-01-13
16h49 +00:00
2020-01-13
16h49 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.1:sp10:*:*:*:*:*:*

Informations

Vendor

sap

Product

businessobjects_business_intelligence_platform

Version

4.1

Update

sp10

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2019-0398 2019-12-11 20h35 +00:00 Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery.
8.8
Haute
CVE-2019-0395 2019-12-11 20h34 +00:00 SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability.
5.4
Moyen
CVE-2019-0396 2019-11-13 21h18 +00:00 SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly filtered by Web Intelligence HTML interface in some specific workflows.
7.1
Haute
CVE-2019-0382 2019-11-13 20h59 +00:00 A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pages); corrected in version 4.2. Privileges are required in order to exploit this vulnerability.
5.4
Moyen
CVE-2019-0378 2019-10-08 17h25 +00:00 SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before version 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the file name of the background image resulting in Stored Cross-Site Scripting.
5.4
Moyen
CVE-2019-0377 2019-10-08 17h24 +00:00 SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the input controls, resulting in Stored Cross-Site Scripting.
5.4
Moyen
CVE-2019-0376 2019-10-08 17h23 +00:00 SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which can be executed later by the victim, resulting in Stored Cross-Site Scripting.
5.4
Moyen
CVE-2019-0375 2019-10-08 17h22 +00:00 SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the export dialog box of the report name resulting in reflected Cross-Site Scripting.
5.4
Moyen
CVE-2019-0374 2019-10-08 17h21 +00:00 SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the chart title resulting in reflected Cross-Site Scripting
5.4
Moyen