SAP SE SAP Business Objects Business Intelligence Platform

• CVE-2026-44755 Medium 4.3 Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform 0.1%
• CVE-2025-42988 Low 3.7 Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform 0.3%
• CVE-2025-23185 Medium 4.1 Information Disclosure in SAP Business Objects Business Intelligence Platform 0.3%
• CVE-2020-6220 Medium 4.4 BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerabili 0.5%
• CVE-2022-24398 Unrated Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which would otherwise be restricted. 0.8%
• CVE-2020-6294 High 8.5 Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionalities that require user identity. 1.5%
• CVE-2020-6269 Medium 4.3 Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosu 0.8%
• CVE-2020-6247 Medium 5.9 SAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated attacker to prevent legitimate users from accessing a service. Using a specially crafted request, the attack 1.0%
• CVE-2020-6245 Medium 6.5 SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code that can be executed by the application due to Improper Contr 0.3%
• CVE-2020-6211 Medium 6.1 SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials o 0.7%
• CVE-2020-6195 Medium 6.4 SAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure. It involves social engineering in order to gai 0.6%
• CVE-2020-6237 High 7.5 Under certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2, dswsbobje web application allows an attacker to access information which would otherwise be restricted, 1.1%
• CVE-2020-6223 Medium 6.1 The open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to modify certain error pages to include malicious content. This can misdirect a user wh 0.7%
• CVE-2020-6218 Medium 5.0 Admin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, allows an attacker to access information that should otherwise be restricted, leading to Inform 0.9%