| Package | Affected versions | Patched versions |
|---|---|---|
| infoview | = 5.1.4= 5.1.5= 5.1.6= 5.1.7= 5.1.8 | |
| webintelligence | = 2.7= 2.7.1= 2.7.2= 2.7.3= 2.7.4 |
Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free