Sap Business Intelligence Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

4.2	43
420	35
430	34
4.1	29
4.3	11

Przeciwdziałanie

Official Fix	52
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	61

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	113

Wektor dostępu

Not Defined	0
Physical	0
Local	4
Adjacent	11
Network	98

Uwierzytelnianie

Not Defined	0
High	8
Low	57
None	48

Interakcja z użytkownikiem

Not Defined	0
Required	53
None	60

C3BM Index

Ostatni rok

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	9
≤5	36
≤6	33
≤7	23
≤8	4
≤9	6
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	9
≤5	36
≤6	36
≤7	21
≤8	4
≤9	7
≤10	0

VulDB

≤1	0
≤2	0
≤3	5
≤4	29
≤5	39
≤6	17
≤7	13
≤8	7
≤9	3
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	1
≤5	6
≤6	32
≤7	22
≤8	16
≤9	7
≤10	5

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	8
≤6	5
≤7	5
≤8	1
≤9	3
≤10	6

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	25
<10k	59
<25k	29
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	40
<2k	9
<5k	30
<10k	28
<25k	6
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (14): 1.0, 2.0, 4.0, 4.00, 4.1, 4.2, 4.3, 4.10, 4.20, 4.30, 403, 410, 420, 430

Link to Product Website: https://www.sap.com

Typ oprogramowania: Business Process Management Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2023-09-12	7.4	7.3	SAP BusinessObjects Business Intelligence Platform Web Intelligence HTML Interface privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-42472
2023-09-12	7.1	7.0	SAP BusinessObjects Business Intelligence Platform Promotion Management information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-40622
2023-09-12	5.3	5.2	SAP BusinessObjects Business Intelligence Platform Version Management System information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-37489
2023-08-08	3.3	3.2	SAP BusinessObjects Business Intelligence information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-39440
2023-07-11	5.7	5.7	SAP BusinessObjects Business Intelligence Platform privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-36917
2023-05-09	6.3	6.3	SAP BusinessObjects Business Intelligence Platform Login Token information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-28762
2023-05-09	5.2	5.1	SAP BusinessObjects Business Intelligence Platform Redirect	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-30741
2023-05-09	5.2	5.1	SAP BusinessObjects Business Intelligence Platform Redirect	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-31406
2023-05-09	4.6	4.5	SAP BusinessObjects Business Intelligence Platform Central Management Service information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-31404
2023-05-09	6.1	6.0	SAP BusinessObjects Business Intelligence Platform information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.06	CVE-2023-30740
2023-04-11	6.7	6.7	SAP BusinessObjects Business Intelligence Platform Promotion Management information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-28765
2023-03-14	6.8	6.7	SAP BusinessObjects Business Intelligence Platform privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-27896
2023-03-14	6.1	6.0	SAP BusinessObjects Business Intelligence Platform Web Services privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-27271
2023-03-14	9.2	9.0	SAP Business Objects Business Intelligence Platform CMC privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-25616
2023-03-14	4.9	4.8	SAP BusinessObjects Business Intelligence Platform Web Services information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-27894
2023-02-14	4.4	4.4	SAP BusinessObjects Business Intelligence Web Intelligence User Interface cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-23856
2023-02-14	8.1	8.0	SAP BusinessObjects Business Intelligence Platform privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-24530
2023-02-14	6.4	6.3	SAP BusinessObjects Business Intelligence Platform information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-0020
2023-01-10	9.2	9.0	SAP BusinessObjects Business Intelligence Analysis Edition for OLAP privilege escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-0022
2023-01-10	6.8	6.7	SAP BusinessObjects Business Intelligence Platform CMC Application Crystal Reports cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-0018
2023-01-10	4.0	4.0	SAP BusinessObjects Business Intelligence Platform Web Intelligence User Interface cross site scripting	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-0015
2022-12-13	5.3	5.2	SAP Business Intelligence Platform Web Intelligence weak authentication	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-41263
2022-12-12	5.3	5.2	SAP BusinessObjects Business Intelligence Platform Monitoring DB information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-31596
2022-10-12	5.5	5.5	SAP BusinessObjects Business Intelligence Platform/SE Credentials information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-39013
2022-10-12	3.7	3.6	SAP BusinessObjects Business Intelligence Platform information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-35296

88 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 88 results.

więcej wpisów autorstwa Sap

◂ PoprzedniPrzeglądKolejny ▸

Interested in the pricing of exploits?

See the underground prices here!