Vulnerabilities > SAP > Businessobjects WEB Intelligence
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-12 | CVE-2023-42476 | Cross-site Scripting vulnerability in SAP Businessobjects web Intelligence 420 SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject JavaScript code into Web Intelligence documents which is then executed in the victim’s browser each time the vulnerable page is visited. | 6.8 |
| 2023-10-10 | CVE-2023-42474 | Cross-site Scripting vulnerability in SAP Businessobjects web Intelligence 420 SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. | 5.4 |
| 2022-02-09 | CVE-2022-22546 | Cross-site Scripting vulnerability in SAP Businessobjects web Intelligence 420 Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420. | 5.4 |
| 2021-07-14 | CVE-2021-33667 | Unspecified vulnerability in SAP Businessobjects web Intelligence 420/430 Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted. | 4.3 |