Vulnerabilities

TI-2008-01819 CVE-2008-1894 · GHSA-phc9-wg8m-34wx

Cross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in…

LOW 24

Cross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in BusinessObjects InfoView XI R2 SP1, SP2, and SP3 Java version before FixPack 3.5 allows remote attackers to inject arbitrary web sc…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02034 Published 2008-04-18 No fix listed CWE-79

TI-2004-00481 CVE-2004-0534 · GHSA-45rq-wggf-p92p

Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8…

LOW 22

Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when upl…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2005-04-14 No fix listed

TI-2004-00480 CVE-2004-0533 · GHSA-jjmg-v3gx-g9v9

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the…

LOW 12

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the Inf…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.0069 Published 2005-04-14 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in…

Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8…

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the…