CVE-2023-42474

概要

参考情報

• me.sap.com/notes/3372991 · Permissions Required
• sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory

businessobjects web intelligence のその他の脆弱性

• CVE-2024-25646中 6.5Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system …
• CVE-2023-42476中 6.8SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject JavaScript code into Web Intelligence docum…
• CVE-2022-22546中 5.4Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Int…
• CVE-2021-33667中 4.3Under certain conditions, SAP Business Objects Web Intelligence (BI Launchpad) versions - 420, 430, allows an attacker to access jsp source …