[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCuHYEQr97cft4DdGU-WaNVX03wQvOFK_uFuYfbwaTCU":3,"g5a-ex:sap\u002Fbusinessobjects_business_intelligence@*":139,"g5a-family:sap\u002Fbusinessobjects_business_intelligence":141},{"success":4,"data":5},true,{"product":6,"versions":45,"topVulnerabilitiesByEpss":57,"kevVulnerabilities":116,"seoMetadata":117,"meta":136},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":44},"sap","businessobjects_business_intelligence",11,45,0,"2025-06-10",[14,18,21,23,26,29,31,34,36,39,42],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2025",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2027",1,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"4.0",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"4.1",13,{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"4.10",3,{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},"410",{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"4.2",17,{"version":35,"cve_count":28,"kev_count":11,"has_kev":17},"4.20",{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},"420",23,{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},"4.3",8,{"version":43,"cve_count":38,"kev_count":11,"has_kev":17},"430","Businessobjects Business Intelligence by Sap is a technology product with 11 tracked versions and 45 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[46,47,48,49,50,51,52,53,54,55,56],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},{"version":35,"cve_count":28,"kev_count":11,"has_kev":17},{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},{"version":43,"cve_count":38,"kev_count":11,"has_kev":17},[58,66,74,80,86,93,98,102,106,111],{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":63,"severity":64,"isKev":17,"epssScore":65},"CVE-2023-28765","An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, can get access to lcmbiar file and further decrypt the file. After this attacker can gain access to BI user’s passwords and depending on the privileges of the BI user, the attacker can perform operations that can completely compromise the application.\n\n","2023-04-11",9.8,"v3.1","Critical",0.14942,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":17,"epssScore":73},"CVE-2019-0268","SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an untrusted source.","2019-03-12",8.1,"v3.0","High",0.022,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":63,"severity":72,"isKev":17,"epssScore":79},"CVE-2018-2446","Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (server name), hence leading to an information disclosure.","2018-08-14",7.5,0.01744,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":71,"severity":72,"isKev":17,"epssScore":85},"CVE-2018-2427","SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.","2018-07-10",8.8,0.01724,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":71,"severity":91,"isKev":17,"epssScore":92},"CVE-2018-2473","SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.","2018-11-13",6.5,"Medium",0.01533,{"cveId":94,"description":95,"publishedDate":83,"cvssScore":96,"cvssVersion":71,"severity":91,"isKev":17,"epssScore":97},"CVE-2018-2431","SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.",6.1,0.01325,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":96,"cvssVersion":71,"severity":91,"isKev":17,"epssScore":97},"CVE-2019-0326","SAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise), versions 4.1, 4.2, 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.","2019-07-10",{"cveId":103,"description":104,"publishedDate":77,"cvssScore":90,"cvssVersion":71,"severity":91,"isKev":17,"epssScore":105},"CVE-2018-2447","SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database.",0.01249,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":90,"cvssVersion":71,"severity":91,"isKev":17,"epssScore":110},"CVE-2019-0333","In some situations, when a client cancels a query in SAP BusinessObjects Business Intelligence Platform (Web Intelligence), versions 4.2, 4.3, the attacker can then query and receive the whole data set instead of just what is part of their authorized security profile, resulting in Information Disclosure.","2019-08-14",0.01135,{"cveId":112,"description":113,"publishedDate":109,"cvssScore":114,"cvssVersion":71,"severity":91,"isKev":17,"epssScore":115},"CVE-2019-0331","Under certain conditions, SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure.",5.3,0.01111,[],{"title":118,"metaDescription":119,"keywords":120,"structuredData":121},"Businessobjects Business Intelligence by Sap - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Businessobjects Business Intelligence by Sap covering 11 versions with 45 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Businessobjects Business Intelligence vulnerabilities, Businessobjects Business Intelligence security, Businessobjects Business Intelligence CVE, Sap Businessobjects Business Intelligence, Businessobjects Business Intelligence threat intelligence, Sap security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":122,"@type":123,"name":124,"description":119,"url":125,"manufacturer":126,"applicationCategory":130,"softwareVersion":131,"mainEntity":132},"https:\u002F\u002Fschema.org","SoftwareApplication","Businessobjects Business Intelligence","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsap\u002Fbusinessobjects_business_intelligence",{"@type":127,"name":128,"url":129},"Organization","Sap","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsap","Security Software","11 versions tracked",{"@type":133,"name":134,"description":135,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Businessobjects Business Intelligence Security Vulnerabilities","Security vulnerabilities affecting Businessobjects Business Intelligence by Sap",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":137,"apiVersion":138},"2026-10-16T23:59:16.474Z","3.0",{"rows":140,"total":11,"capped":17,"failed":11},[],[142],{"product":143,"cves":144},"businessobjects_business_intelligence_platform",69]