Vulnerabilities (CVE)

Filtered by vendor Sap Subscribe
Filtered by product Business Intelligence Promotion Management Application
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16681 1 Sap 1 Business Intelligence Promotion Management Application 2024-02-28 4.3 MEDIUM 6.1 MEDIUM
Cross-Site Scripting (XSS) vulnerability in SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, 4.30, as user controlled inputs are not sufficiently encoded.
CVE-2017-16684 1 Sap 1 Business Intelligence Promotion Management Application 2024-02-28 7.5 HIGH 9.8 CRITICAL
SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentication checks for functionalities that require user identity.