SAP BusinessObjects Business Intelligence Platform 430

Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console)

Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP)

Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform

SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network. On successful exploitation, attacker can perform operations that may completely compromise the application causing high impact on confidentiality, integrity and availability of the application.

Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.

Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)

SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, there could be a high impact on confidentiality and limited impact on integrity of the application.

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS.

Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform

Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure.

Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform

Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform

Denial of service (DOS) in SAP BusinessObjects BI Platform

Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform

A CSRF token visible in the URL may possibly lead to information disclosure vulnerability.

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of objects it doesn't own and which would otherwise be restricted.

SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shouldn't or don't need to have access.

SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege to read and decrypt LCMBIAR file's password under certain conditions, enabling the attacker to modify the password or import the file into another system causing high impact on confidentiality but a limited impact on the availability and integrity of the application.

Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform

Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)

Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)

Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling)

DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform

Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 430, allows an attacker to access certain unencrypted sensitive parameters which would otherwise be restricted.

Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform

Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform

Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)