SAP SE SAP Businessobjects Business Intelligence Platform (Web Intelligence HTML Interface)

9 CVEs affecting SAP SE SAP Businessobjects Business Intelligence Platform (Web Intelligence HTML Interface). Latest disclosed: 2021-01-12. Critical: 0, High: 1.

Top CVEs affecting SAP SE SAP Businessobjects Business Intelligence Platform (Web Intelligence HTML Interface)
CVESeverityScorePublishedSummary
CVE-2019-0396High7.12019-11-13SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML…
CVE-2021-21447Medium5.42021-01-12SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom…
CVE-2020-6312Medium5.42020-09-09SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), versions - 4.1, 4.2, allows an attacker with a non-administrative user ac…
CVE-2020-6222Medium5.42020-04-14SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), versions 4.1, 4.2, does not sufficiently encode user-controlled inputs…
CVE-2019-0378Medium5.42019-10-08SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before version 4.2, does not sufficiently encode user-controlled inputs a…
CVE-2019-0377Medium5.42019-10-08SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2, does not sufficiently encode user-controlled inputs…
CVE-2019-0376Medium5.42019-10-08SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled…
CVE-2019-0375Medium5.42019-10-08SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled…
CVE-2019-0374Medium5.42019-10-08SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled…