High severity8.1NVD Advisory· Published Mar 12, 2019· Updated Jun 17, 2026

CVE-2019-0268

Description

SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an untrusted source.

Affected products

SAP/Businessobjects Business Intelligence3 versions
cpe:2.3:a:sap:businessobjects_business_intelligence:4.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sap:businessobjects_business_intelligence:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence:4.2:*:*:*:*:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence:4.3:*:*:*:*:*:*:*
SAP/BusinessObjects Business Intelligence Platform (Web Intelligence)llm-fuzzy
Range: 4.10, 4.20, 4.30
SAP SE/SAP BusinessObjects Business Intelligence Platform (CMC Module)v5
Range: < 4.1

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/107364nvdThird Party AdvisoryVDB Entry
launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000