Businessobjects Edge

businessobjects_edge

Vendor: Sap • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-2074 1Sap 1Businessobjects Edge Nov 21, 2024 Aug 9, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681.
CVE-2015-2073 1Sap 1Businessobjects Edge Nov 21, 2024 Aug 9, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP Note 2018682.
CVE-2014-9320 1Sap 1Businessobjects Edge Nov 21, 2024 Aug 9, 2021 N/A· v4 9.8 CRITICAL· v3 9.3 HIGH· v2 SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and consequently gain SYSTEM privileges via vectors involving CORBA calls, aka SAP Note 2039905.
CVE-2015-7730 1Sap 3Businessobjects Businessobjects EdgeBusinessobjects Xi May 6, 2026 Oct 15, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial of service (out-of-bounds read and listener crash) via a crafted GIOP packet, a...Show more SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial of service (out-of-bounds read and listener crash) via a crafted GIOP packet, aka SAP Security Note 2001108.Show less
CVE-2015-2076 1Sap 1Businessobjects Edge May 6, 2026 Feb 27, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395.
CVE-2015-2075 1Sap 1Businessobjects Edge May 6, 2026 Feb 27, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396.