Vulnerabilities > SAP > Businessobjects Business Intelligence Platform > 4.10

DATE CVE VULNERABILITY TITLE RISK
2019-09-10 CVE-2019-0352 Information Exposure vulnerability in SAP Businessobjects Business Intelligence Platform 4.10/4.20/4.30
In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.
network
low complexity
sap CWE-200
7.5
2018-10-09 CVE-2018-2471 Unspecified vulnerability in SAP Businessobjects Business Intelligence Platform 4.10/4.20
Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted.
network
low complexity
sap
7.5
2018-03-14 CVE-2018-2397 Cross-site Scripting vulnerability in SAP Businessobjects Business Intelligence Platform
In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) does not sufficiently encode user controlled inputs which results in Cross-Site Scripting.
network
low complexity
sap CWE-79
5.4