SAP Businessobjects Web Intelligence
By the Year
In 2024 there have been 0 vulnerabilities in SAP Businessobjects Web Intelligence . Last year Businessobjects Web Intelligence had 2 security vulnerabilities published. Right now, Businessobjects Web Intelligence is on track to have less security vulnerabilities in 2024 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 2 | 6.10 |
| 2022 | 1 | 5.40 |
| 2021 | 1 | 4.30 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Businessobjects Web Intelligence vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent SAP Businessobjects Web Intelligence Security Vulnerabilities
SAP Business Objects Web Intelligence - version 420
CVE-2023-42476
6.8 - Medium
- December 12, 2023
SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject JavaScript code into Web Intelligence documents which is then executed in the victims browser each time the vulnerable page is visited. Successful exploitation can lead to exposure of the data that the user has access to. In the worst case, attacker could access data from reporting databases.
XSS
SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack
CVE-2023-42474
5.4 - Medium
- October 10, 2023
SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information.
XSS
Due to improper HTML encoding in input control summary, an authorized attacker
CVE-2022-22546
5.4 - Medium
- February 09, 2022
Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420.
XSS
Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430
CVE-2021-33667
4.3 - Medium
- July 14, 2021
Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for SAP Businessobjects Web Intelligence or by SAP? Click the Watch button to subscribe.
