Known vulnerabilities in SAP BusinessObjects Business Intelligence suite - page 3

Vendor: SAP
Software: SAP BusinessObjects Business Intelligence suite
Software CPE: cpe:2.3:a:sap:sap_businessobjects:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 52
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SAP BusinessObjects Business Intelligence suite SAP BusinessObjects Business Intelligence suite is affected by 52 known vulnerabilities: 6 high, 19 medium, 27 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50449 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-21444		 CWE-451 Low
No
No
 - 09.02.2021 SB2021020916
#VU48819 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-26831		 CWE-611 Medium
No
No
 - 08.12.2020 SB2020120807
#VU48661 - Server-Side Request Forgery (SSRF)
CVE-2020-6308		 CWE-918 Medium
Available
No
 - 20.10.2020 SB2020102049
#VU46635 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6325		 CWE-79 Medium
No
No
 - 11.09.2020 SB2020091104
#VU46634 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6288		 CWE-79 Medium
No
No
 - 11.09.2020 SB2020091104
#VU46633 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6312		 CWE-79 Medium
No
No
 - 11.09.2020 SB2020091104
#VU29716 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6222		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071404
#VU29715 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6278		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071404
#VU29714 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6276		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071404
#VU29713 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6281		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071404
#VU17730 - Unrestricted Upload of File with Dangerous Type
CVE-2019-0259		 CWE-434 Low
No
No
 - 18.02.2019 SB2019021223
#VU17729 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0251		 CWE-79 Low
No
No
 - 18.02.2019 SB2019021223


Showing elements 41 - 60 out of 52