SAP SE

SAP Business Objects Business Intelligence Platform (BI Launchpad

2 Versions 3 CVEs

Versions

< 4.1

OTHER 1 CVE

< 4.2

OTHER 3 CVEs

Recent CVEs

CVE-2020-6281

SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-controlled inputs, resulting reflected in Cross-Site Scripting.

MEDIUM Jul 14, 2020

SAP Business Objects Business Intelligence Platform (BI Launchpad and CMC), versions 4.1, 4.2, allows to an attacker to embed malicious scripts in the application while uploading images, which gets executed when the victim opens these files, leading to Stored Cross Site Scripting

MEDIUM Jul 14, 2020

CVE-2020-6216

SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-controlled inputs, resulting in reflected Cross-Site Scripting (XSS) vulnerability.

MEDIUM Apr 14, 2020