SAP SE SAP BusinessObjects Business Intelligence Platform

CVE-2026-0502 Medium 5.4 Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform 0.1%
CVE-2026-27683 Medium 4.1 Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform 0.2%
CVE-2026-24318 Medium 4.2 Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform 0.2%
CVE-2026-0508 High 7.3 Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform 0.3%
CVE-2025-42896 Medium 5.4 Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform 0.3%
CVE-2025-31332 Medium 6.6 Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform 0.2%
CVE-2025-0062 Medium 4.7 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) 0.3%
CVE-2025-0061 High 8.7 Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform 0.5%
CVE-2025-0060 Medium 6.5 Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform 0.4%
CVE-2024-32732 Medium 5.3 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform 0.3%
CVE-2024-45281 Medium 5.8 DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform 0.2%
CVE-2024-41731 Low 3.1 Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform 0.4%
CVE-2024-28166 Low 3.7 Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform 0.3%
CVE-2024-42375 Medium 4.3 Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform 0.4%
CVE-2024-41730 Critical 9.8 Missing Authentication check in SAP BusinessObjects Business Intelligence Platform 75.9%
CVE-2024-34684 Low 3.7 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling) 0.1%
CVE-2024-28165 High 8.1 Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform 0.6%
CVE-2023-36917 Medium 5.9 Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform 0.6%
CVE-2023-31406 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform 0.5%
CVE-2023-30741 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform 0.4%
CVE-2023-30740 Medium 6.3 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform 0.5%
CVE-2023-0020 High 8.5 SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, ther 0.5%
CVE-2022-29619 Unrated Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of objects it doesn't own and which would ot 0.9%
CVE-2022-27671 Unrated A CSRF token visible in the URL may possibly lead to information disclosure vulnerability. 1.3%
CVE-2022-28213 Unrated When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, whi 12.5%
CVE-2022-22541 Unrated SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is t 0.8%
CVE-2022-27667 Unrated Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version 430, allows an attacker to access information which would otherwise be restricte 1.4%
CVE-2021-42061 Unrated SAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. This al 0.5%
CVE-2020-6251 Medium 5.4 Under certain conditions or error scenarios SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted. 0.8%
CVE-2020-6221 Medium 5.4 Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) 0.6%