Description
Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send unintended requests to the web server. This has low impact on integrity and availability of the application. There is no impact on confidentiality of the data.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low
Affected products
- SAP_SE / SAP BusinessObjects Business Intelligence PlatformENTERPRISE 430 – ENTERPRISE 430
- SAP_SE / SAP BusinessObjects Business Intelligence Platform2025 – 2025
- SAP_SE / SAP BusinessObjects Business Intelligence Platform2027 – 2027