Filtered by vendor Sap Se Subscriptions
Filtered by product Sap Business Objects Business Intgelligence Platform Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-33004 1 Sap Se 1 Sap Business Objects Business Intgelligence Platform 2024-09-28 4.3 Medium
SAP Business Objects Business Intelligence Platform is vulnerable to Insecure Storage as dynamic web pages are getting cached even after logging out. On successful exploitation, the attacker can see the sensitive information through cache and can open the pages causing limited impact on Confidentiality, Integrity and Availability of the application.
CVE-2024-41730 2 Sap, Sap Se 2 Business Objects Business Intelligence Platform, Sap Business Objects Business Intgelligence Platform 2024-09-12 9.8 Critical
In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can fully compromise the system resulting in High impact on confidentiality, integrity and availability.