SAP Note 3433545

Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform

MediumCVSS 4.3SAP BusinessObjects BI Platform

CVE(s): CVE-2024-42375 CVE-2024-28166 CVE-2024-41731
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products and versions

Product SAP BusinessObjects Business Intelligence Platform
Versions: ENTERPRISE 430, 2025

Appears in

Patch Days listing this note, newest first.

December 2024Updateupdate of August 2024 noteMediumCVSS 4.3
August 2024NewMediumCVSS 4.3

Open note on SAP for Me (SAP login required)