Businessobjects Business Intelligence vulnerabilitiesRanked by how likely they are to be used.
Businessobjects Business Intelligence is made by SAP. We track 45 published vulnerabilities listed under that exact name, across 11 versions. None of them is on the list of flaws known to be exploited today. SAP lists newer releases under their own names, such as Businessobjects Business Intelligence Platform, so check those pages too.
We keep watching the known-exploited list.
Is Businessobjects Business Intelligence listed under other names? Yes.
SAP also lists Businessobjects Business Intelligence under more specific names, such as Businessobjects Business Intelligence Platform. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which Businessobjects Business Intelligence vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Businessobjects Business Intelligence's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Businessobjects Business Intelligence flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 15%CVE-2023-28765Critical
An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, can get access to lcmbiar file and further decrypt the file.
- 2.2%CVE-2019-0268High
SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an untrusted source.
- 1.7%CVE-2018-2446High
Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (server name), hence leading to an information disclosure.
- 1.7%CVE-2018-2427High
SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code that can be executed by the application.
- 1.5%CVE-2018-2473Medium
SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service,...
- 1.3%CVE-2018-2431Medium
SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
- 1.3%CVE-2019-0326Medium
SAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise), versions 4.1, 4.2, 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
- 1.2%CVE-2018-2447Medium
SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database.
- 1.1%CVE-2019-0333Medium
In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2, 4.3, the attacker can then query and receive the whole data set instead of...
- 1.1%CVE-2019-0331Medium
Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information...
Running Businessobjects Business Intelligence? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, can get access to lcmbiar file and further decrypt the file. After this attacker can gain access to BI user’s passwords and depending on the privileges of the BI user, the attacker can perform operations that can completely compromise the application.
- Matched to
- Businessobjects Business Intelligence on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 45 published vulnerabilities listed under the name Businessobjects Business Intelligence, across 11 versions.
None of Businessobjects Business Intelligence's vulnerabilities is on the list of flaws known to be exploited today.
SAP also lists Businessobjects Business Intelligence under more specific names, such as Businessobjects Business Intelligence Platform. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Create a Precursor Intelligence account and track Businessobjects Business Intelligence. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.