SAP BusinessObjects BI Platform
69 notes since January 2023.
| Patch Day | Note | Title | Priority | CVSS |
|---|---|---|---|---|
| August 2026 | 3756565 | Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server) | High | 7.9 |
| August 2026 | 3753141 | XML External Entity Injection in SAP BusinessObjects Business Intelligence | Medium | 6.5 |
| August 2026 | 3770649 | Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools) | Medium | 4.3 |
| June 2026 | 3687096 | Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform | Medium | 4.3 |
| June 2026 | 3706000 | Security Misconfiguration vulnerability in SAP Business Objects | Low | 3.7 |
| May 2026 | 3667593 | Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform | Medium | 5.4 |
| April 2026 | 3696239 | Denial of Service Vulnerability in SAP BusinessObjects Business Intelligence Platform | Medium | 6.5 |
| April 2026 | 3702191 | Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform | Medium | 4.2 |
| April 2026 | 3698216 | Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform | Medium | 4.1 |
| March 2026 | 3678282 | Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform | High | 7.5 |
| February 2026 | 3654236 | Denial of service (DOS) in SAP BusinessObjects BI Platform | High | 7.5 |
| February 2026 | 3678282 | Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform | High | 7.5 |
| February 2026 | 3674246 | Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform | High | 7.3 |
| February 2026 | 3695912 | Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools) | Medium | 6.5 |
| December 2025 | 3650226 | Denial of service (DOS) in SAP Business Objects | High | 7.5 |
| December 2025 | 3651390 | Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform | Medium | 5.4 |
| October 2025 | 3617142 | Deserialization Vulnerability in SAP BusinessObjects (Web Intelligence and Platform Search) | Low | 3.5 |
| September 2025 | 3611420 | Denial of Service (DoS) vulnerability due to outdated JSON library used in SAP BusinessObjects Business Intelligence Platform | Medium | 6.5 |
| July 2025 | 3565279 | Insecure File Operations vulnerability in SAP Business Objects Business Intelligence Platform (CMC) | High | 8.0 |
| July 2025 | 3573199 | HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) | Medium | 4.1 |
| June 2025 | 3560693 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace) | High | 8.2 |
| June 2025 | 3585545 | Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform | Low | 3.7 |
| May 2025 | 3586013 | Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW) | High | 7.9 |
| May 2025 | 3474398 | Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform | High | 8.7 |
| April 2025 | 3525794 | Improper Authorization in SAP BusinessObjects Business Intelligence platform | High | 8.8 |
| April 2025 | 3565751 | Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform | Medium | 6.6 |
| March 2025 | 3557469 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) | Medium | 5.4 |
| March 2025 | 3557459 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) | Medium | 4.7 |
| March 2025 | 3549494 | Information Disclosure in SAP Business Objects Business Intelligence Platform | Medium | 4.1 |
| February 2025 | 3525794 | Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console) | High | 8.7 |
| February 2025 | 3445708 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (BI Launchpad) | Medium | 6.1 |
| January 2025 | 3474398 | Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform | High | 8.7 |
| January 2025 | 3492169 | Multiple Buffer overflow vulnerabilities in SAP BusinessObjects Business Intelligence Platform (Crystal Reports for Enterprise) | Low | 2.2 |
| December 2024 | 3524933 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform | Medium | 5.3 |
| December 2024 | 3515653 | Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform | Medium | 4.3 |
| December 2024 | 3433545 | Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform | Medium | 4.3 |
| October 2024 | 3479478 | Missing Authentication check in SAP BusinessObjects Business Intelligence Platform | Critical | 9.8 |
| October 2024 | 3478615 | Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) | High | 7.7 |
| September 2024 | 3479478 | Missing Authentication check in SAP BusinessObjects Business Intelligence Platform | Critical | 9.8 |
| September 2024 | 3425287 | DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform | Medium | 5.8 |
| August 2024 | 3479478 | Missing Authentication check in SAP BusinessObjects Business Intelligence Platform | Critical | 9.8 |
| August 2024 | 3433545 | Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform | Medium | 4.3 |
| June 2024 | 3441817 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling) | Low | 3.7 |
| May 2024 | 3431794 | Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform | High | 8.1 |
| May 2024 | 3449093 | Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices) | Medium | 4.3 |
| March 2024 | 3414195 | Path Traversal Vulnerability in SAP BusinessObjects Business Intelligence Platform (Central Management Console) | High | 7.2 |
| September 2023 | 3320355 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management) | Critical | 9.9 |
| September 2023 | 3245526 | Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC) | Critical | 9.9 |
| September 2023 | 3370490 | Insufficient File type validation in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) | High | 8.7 |
| September 2023 | 3352453 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System) | Medium | 5.3 |
| August 2023 | 3317710 | Binary hijack in SAP BusinessObjects Business Intelligence Suite (installer) | High | 7.6 |
| August 2023 | 3312047 | Denial of Service (DoS) vulnerability due to the usage of vulnerable version of Commons FileUpload in SAP BusinessObjects Business Intelligence Platform (CMC) | High | 7.5 |
| August 2023 | 3312586 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform | Medium | 4.4 |
| July 2023 | 3320702 | Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform | Medium | 5.9 |
| June 2023 | 3319400 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform | Medium | 6.1 |
| May 2023 | 3307833 | Information Disclosure vulnerabilities in SAP BusinessObjects Intelligence Platform | Critical | 9.1 |
| May 2023 | 3213507 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (CMC) | High | 8.2 |
| May 2023 | 3217303 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (CMC) | High | 7.7 |
| May 2023 | 3233226 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Commentary DB) | Medium | 6.8 |
| May 2023 | 3313484 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform | Medium | 6.3 |
| May 2023 | 3309935 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform | Medium | 6.1 |
| May 2023 | 3319400 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform | Medium | 6.1 |
| May 2023 | 3213524 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Commentary DB) | Medium | 6.0 |
| May 2023 | 3145769 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (CMC) | Medium | 5.3 |
| May 2023 | 3038911 | Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service) | Medium | 5.0 |
| May 2023 | 3302595 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform | Low | 3.7 |
| April 2023 | 3298961 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management) | Critical | 9.8 |
| March 2023 | 3245526 | Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC) | Critical | 9.9 |
| March 2023 | 3283438 | OS command execution vulnerability in SAP Business Objects Business Intelligence Platform (Adaptive Job Server) | Critical | 9.0 |
| March 2023 | 3287120 | Multiple vulnerabilities in the SAP BusinessObjects Business Intelligence platform | Medium | 6.5 |
| February 2023 | 3263135 | Information disclosure vulnerability in SAP BusinessObjects Business Intelligence platform | High | 8.5 |
| February 2023 | 3256787 | Unrestricted Upload of File in SAP BusinessObjects Business Intelligence Platform (CMC) | High | 8.4 |
| February 2023 | 3263863 | Cross-Site Scripting (XSS) vulnerability in Web Intelligence Interface | Medium | 4.3 |
| January 2023 | 3262810 | Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP) | Critical | 9.9 |
| January 2023 | 3243924 | Insecure Deserialization of Untrusted Data in SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad) | Critical | 9.9 |
| January 2023 | 3266006 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console) | Medium | 5.4 |
| January 2023 | 3251447 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence) | Medium | 4.6 |