Advisories · Technology

SAP_SE SAP BusinessObjects Business Intelligence Platform.

Every CVE that names SAP_SE SAP BusinessObjects Business Intelligence Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-0502 CVE record

CVSS 5.4 Medium

Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Cross-site request forgery (CSRF)
Not analysed yet 12 May 2026
CVE-2026-27683 CVE record

CVSS 4.1 Medium

Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Cross-site scripting (XSS)
Not analysed yet 14 Apr 2026
CVE-2026-24318 CVE record

CVSS 4.2 Medium

Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- CWE-539
Not analysed yet 14 Apr 2026
CVE-2026-0508 CVE record

CVSS 7.3 High

Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Open redirect
Not analysed yet 10 Feb 2026
CVE-2025-42896 CVE record

CVSS 5.4 Medium

Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- CWE-116
Not analysed yet 9 Dec 2025
CVE-2025-31332 CVE record

CVSS 6.6 Medium

Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- CWE-277
Not analysed yet 8 Apr 2025
CVE-2025-0062 CVE record

CVSS 4.7 Medium

Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2025
CVE-2025-0061 CVE record

CVSS 8.7 High

Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-0060 CVE record

CVSS 6.5 Medium

Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Code injection
Not analysed yet 14 Jan 2025
CVE-2024-32732 CVE record

CVSS 5.3 Medium

Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform
- SAP_SE SAP BusinessObjects Business Intelligence platform
- Information disclosure
Not analysed yet 10 Dec 2024
CVE-2024-45281 CVE record

CVSS 5.8 Medium

DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- CWE-426
Not analysed yet 10 Sept 2024
CVE-2024-41731 CVE record

CVSS 3.1 Low

Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Unrestricted file upload
Not analysed yet 13 Aug 2024
CVE-2024-28166 CVE record

CVSS 3.7 Low

Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Unrestricted file upload
Not analysed yet 13 Aug 2024
CVE-2024-42375 CVE record

CVSS 4.3 Medium

Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Unrestricted file upload
Not analysed yet 13 Aug 2024
CVE-2024-41730 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Missing Authentication check in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Broken access control
Not analysed yet 13 Aug 2024
CVE-2024-34684 CVE record

CVSS 3.7 Low

Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling)
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Information disclosure
Not analysed yet 11 Jun 2024
CVE-2024-28165 CVE record

CVSS 8.1 High

Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Cross-site scripting (XSS)
Not analysed yet 14 May 2024
CVE-2023-36917 CVE record

CVSS 5.9 Medium

Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Authentication bypass
Not analysed yet 11 Jul 2023
CVE-2023-31406 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Cross-site scripting (XSS)
Not analysed yet 9 May 2023
CVE-2023-30741 CVE record

CVSS 6.1 Medium

Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Cross-site scripting (XSS)
Not analysed yet 9 May 2023
CVE-2023-30740 CVE record

CVSS 6.3 Medium

Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Information disclosure
Not analysed yet 9 May 2023
CVE-2023-0020 CVE record

CVSS 8.5 High

Information disclosure in SAP_SE SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- Information disclosure
Not analysed yet 14 Feb 2023
CVE-2022-29619 CVE record

Incorrect authorization in SAP SE SAP BusinessObjects Business Intelligence Platform
- SAP SE SAP BusinessObjects Business Intelligence Platform
- Broken access control
Not analysed yet 12 Jul 2022
CVE-2022-27671 CVE record

Information disclosure in SAP SE SAP BusinessObjects Business Intelligence Platform
- SAP SE SAP BusinessObjects Business Intelligence Platform
- Information disclosure
Not analysed yet 12 Apr 2022
CVE-2022-28213 CVE record

SAP SE SAP BusinessObjects Business Intelligence Platform: When a user access SOAP Web services in SAP BusinessObjects Business Intelligence…
- SAP SE SAP BusinessObjects Business Intelligence Platform
- CWE-112
Not analysed yet 12 Apr 2022
CVE-2022-22541 CVE record

SAP SE SAP BusinessObjects Business Intelligence Platform: SAP BusinessObjects Business Intelligence Platform - versions 420, 430…
- SAP SE SAP BusinessObjects Business Intelligence Platform
- CWE-213
Not analysed yet 12 Apr 2022
CVE-2022-27667 CVE record

Information disclosure in SAP SE SAP BusinessObjects Business Intelligence Platform
- SAP SE SAP BusinessObjects Business Intelligence Platform
- Information disclosure
Not analysed yet 12 Apr 2022
CVE-2021-42061 CVE record

Cross-site scripting in SAP SE SAP BusinessObjects Business Intelligence Platform
- SAP SE SAP BusinessObjects Business Intelligence Platform
- Cross-site scripting (XSS)
Not analysed yet 14 Dec 2021
CVE-2020-6251 CVE record

CVSS 5.4 Medium

Under certain conditions or error scenarios SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted.
- SAP SE SAP BusinessObjects Business Intelligence Platform
Not analysed yet 12 May 2020
CVE-2020-6221 CVE record

CVSS 5.4 Medium

Web Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)…
- SAP SE SAP BusinessObjects Business Intelligence Platform
Not analysed yet 14 Apr 2020
CVE-2019-0289 CVE record

SAP SE SAP BusinessObjects Business Intelligence platform: Under certain conditions SAP BusinessObjects Business Intelligence platform (Analysis for…
- SAP SE SAP BusinessObjects Business Intelligence platform
Not analysed yet 14 May 2019