Sap: >> Businessobjects Web Intelligence >> 430 Security Vulnerabilities
Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application.
CVSS Score
7.7
EPSS Score
0.001
Published
2024-04-09
Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted.
CVSS Score
4.3
EPSS Score
0.003
Published
2021-07-14