SAP SE SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)

• CVE-2023-42472 High 8.7 Insufficient File type validation in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) 0.6%
• CVE-2021-21447 Medium 5.4 SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, wh 0.5%
• CVE-2020-6312 Medium 5.4 SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), versions - 4.1, 4.2, allows an attacker with a non-administrative user account that can edit certain web page prop 0.5%
• CVE-2020-6222 Medium 5.4 SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) v 0.8%