Known vulnerabilities in SAP BusinessObjects Business Intelligence suite - page 2

Vendor: SAP
Software: SAP BusinessObjects Business Intelligence suite
Software CPE: cpe:2.3:a:sap:sap_businessobjects:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 52
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SAP BusinessObjects Business Intelligence suite SAP BusinessObjects Business Intelligence suite is affected by 52 known vulnerabilities: 6 high, 19 medium, 27 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98124 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-37179		 CWE-22 Medium
No
No
 - 08.10.2024 SB2024100805
#VU96987 - Untrusted Search Path
CVE-2024-45281		 CWE-426 Low
No
No
 - 10.09.2024 SB2024091023
#VU95815 - Unrestricted Upload of File with Dangerous Type
CVE-2024-41731		 CWE-434 Medium
No
No
 - 13.08.2024 SB2024081344
#VU95814 - Unrestricted Upload of File with Dangerous Type
CVE-2024-28166		 CWE-434 Medium
No
No
 - 13.08.2024 SB2024081344
#VU95813 - Improper Authentication
CVE-2024-41730		 CWE-287 High
No
No
 - 13.08.2024 SB2024081344
#VU84579 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42478		 CWE-79 Low
No
No
 - 19.12.2023 SB2023121955
#VU81972 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42474		 CWE-79 Low
No
No
 - 12.10.2023 SB2023101283
#VU80690 - Improper Access Control
CVE-2023-37489		 CWE-284 Low
No
No
 - 12.09.2023 SB2023091263
#VU80689 - UNIX Symbolic Link (Symlink) Following
CVE-2023-40623		 CWE-61 Low
No
No
 - 12.09.2023 SB2023091263
#VU80684 - Unrestricted Upload of File with Dangerous Type
CVE-2023-42472		 CWE-434 Medium
No
No
 - 12.09.2023 SB2023091263
#VU80641 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-25616		 CWE-94 Medium
No
No
 - 12.09.2023 SB2023091263
#VU80640 - Exposure of sensitive information to an unauthorized actor
CVE-2023-40622		 CWE-200 Medium
No
No
 - 12.09.2023 SB2023091263
#VU79276 - Dependency on Vulnerable Third-Party Component
 CWE-1395 Medium
No
No
 - 09.08.2023 SB2023080921
#VU79275 - Insufficient Verification of Data Authenticity
CVE-2023-37490		 CWE-345 Low
No
No
 - 09.08.2023 SB2023080921
#VU79274 - Cleartext Storage of Sensitive Information
CVE-2023-39440		 CWE-312 Low
No
No
 - 09.08.2023 SB2023080921
#VU78834 - Security Features
CVE-2023-36917		 CWE-254 Low
No
No
 - 01.08.2023 SB2023080131
#VU78684 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-31406		 CWE-79 Low
No
No
 - 26.07.2023 SB2023072752
#VU75125 - Exposure of sensitive information to an unauthorized actor
CVE-2023-28765		 CWE-200 Medium
No
No
 - 14.04.2023 SB2023041427
#VU55840 - Use of Web Link to Untrusted Target with window.opener Access
CVE-2021-33697		 CWE-1022 Low
No
No
 - 13.08.2021 SB2021081309
#VU55839 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-33696		 CWE-79 Low
No
No
 - 13.08.2021 SB2021081308


Showing elements 21 - 40 out of 52