CVE-2018-2447

Description

SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database.

Affected products

• SAP / SAP BusinessObjects Business Intelligence4.2 – 4.2

References

• MISChttp://www.securityfocus.com/bid/105075
• MISChttps://launchpad.support.sap.com/#/notes/2644154
• MISChttps://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742