High severity8.8NVD Advisory· Published Dec 11, 2019· Updated Jun 17, 2026
CVE-2019-0398
CVE-2019-0398
Description
Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery.
Affected products
5cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.2:*:*:*:*:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:4.3:*:*:*:*:*:*:*
- Range: <4.1, <4.2, <4.3
- SAP SE/SAP BusinessObjects Business Intelligence Platform (Monitoring Application)v5Range: before 4.1
Patches
Vulnerability mechanics
References
2- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.