Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Sap Subscribe
Filtered by product Businessobjects Web Intelligence
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-22546 1 Sap 1 Businessobjects Web Intelligence 2022-10-25 3.5 LOW 5.4 MEDIUM
Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420.
CVE-2021-33667 1 Sap 1 Businessobjects Web Intelligence 2021-07-16 4.0 MEDIUM 4.3 MEDIUM
Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.