VYPR
← All advisories
High severity7.5NVD Advisory· Published Sep 10, 2019· Updated Jun 17, 2026

CVE-2019-0352

CVE-2019-0352

Description

In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.

Affected products

5
  • SAP SE/SAP BusinessObjects Business Intelligence Platform (CMC)v5
    Range: < 4.1
  • SAP/SAP Business Objects Business Intelligence Platform CMCllm-fuzzy
    Range: <4.1, <4.2, <4.3
  • SAP/Businessobjects Business Intelligence Platform3 versions
    cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.10:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.10:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.20:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.30:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.