Businessobjects

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Businessobjects records in CISA KEV

No Businessobjects vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Crystal Enterprise 4 records HIGH Webintelligence 4 records LOW Crystal Reports 3 records HIGH Crystal Reports Xi 3 records HIGH Infoview 3 records LOW Crystal Enterprise Java Sdk 1 record HIGH Crystal Enterprise Ras 1 record HIGH Crystal Enterprise Xi 1 record LOW

Records

4 records in Webintelligence · all components

TI-2003-01149 CVE-2003-1249 · GHSA-qq24-c758-p5gr

WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.

LOW 38

WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0259 Published 2005-11-16 No fix listed

TI-2005-04018 CVE-2005-4274 · GHSA-mfcq-4jh5-jjj3

Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote…

LOW 26

Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service (user account lock out) via unknown attack vectors related to "authentication mechanisms" and "form…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01334 Published 2005-12-15 No fix listed

TI-2004-00481 CVE-2004-0534 · GHSA-45rq-wggf-p92p

Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8…

LOW 22

Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when upl…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2005-04-14 No fix listed

TI-2004-00480 CVE-2004-0533 · GHSA-jjmg-v3gx-g9v9

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the…

LOW 12

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the Inf…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.0069 Published 2005-04-14 No fix listed

Open these records in search →

Critical	1
High	5
Medium	6
Low	1
No CVSS	0