SAP BusinessObjects BI Platform
自 2023 年 1 月以来共 47 条安全说明。
优先级依据 CVSS 推算，并非 SAP 的优先级：CVSS 9.0 及以上为严重，7.0 及以上为高，4.0 及以上为中，低于 4.0 为低。SAP 自己的优先级仅见于 SAP for Me（需要 SAP 登录）。
| 补丁日 | 编号 | 标题 | 优先级（依据 CVSS 推算，并非 SAP 的优先级） | CVSS |
|---|---|---|---|---|
| 2026年8月 | 3756565 | Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server) | 高 | 7.9 |
| 2026年8月 | 3753141 | XML External Entity Injection in SAP BusinessObjects Business Intelligence | 中 | 6.5 |
| 2026年8月 | 3770649 | Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools) | 中 | 4.3 |
| 2026年6月 | 3687096 | Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform | 中 | 4.3 |
| 2026年6月 | 3706000 | Security Misconfiguration vulnerability in SAP Business Objects | 低 | 3.7 |
| 2026年5月 | 3667593 | Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform | 中 | 5.4 |
| 2026年4月 | 3702191 | Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform | 中 | 4.2 |
| 2026年4月 | 3698216 | Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform | 中 | 4.1 |
| 2026年2月 | 3654236 | Denial of service (DOS) in SAP BusinessObjects BI Platform | 高 | 7.5 |
| 2026年2月 | 3678282 | Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform | 高 | 7.5 |
| 2026年2月 | 3674246 | Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform | 高 | 7.3 |
| 2026年2月 | 3695912 | Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools) | 中 | 6.5 |
| 2025年12月 | 3651390 | Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform | 中 | 5.4 |
| 2025年7月 | 3573199 | HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) | 中 | 4.1 |
| 2025年6月 | 3560693 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace) | 高 | 8.2 |
| 2025年6月 | 3585545 | Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform | 低 | 3.7 |
| 2025年5月 | 3586013 | Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW) | 高 | 7.9 |
| 2025年4月 | 3565751 | Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform | 中 | 6.6 |
| 2025年3月 | 3557469 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) | 中 | 5.4 |
| 2025年3月 | 3557459 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) | 中 | 4.7 |
| 2025年3月 | 3549494 | Information Disclosure in SAP Business Objects Business Intelligence Platform | 中 | 4.1 |
| 2025年2月 | 3525794 | Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console) | 高 | 8.7 |
| 2025年2月 | 3445708 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (BI Launchpad) | 中 | 6.1 |
| 2025年1月 | 3474398 | Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform | 高 | 8.7 |
| 2024年12月 | 3524933 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform | 中 | 5.3 |
| 2024年10月 | 3478615 | Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) | 高 | 7.7 |
| 2024年9月 | 3425287 | DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform | 中 | 5.8 |
| 2024年8月 | 3479478 | Missing Authentication check in SAP BusinessObjects Business Intelligence Platform | 严重 | 9.8 |
| 2024年8月 | 3433545 | Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform | 中 | 4.3 |
| 2024年6月 | 3441817 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling) | 低 | 3.7 |
| 2024年5月 | 3431794 | Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform | 高 | 8.1 |
| 2024年5月 | 3449093 | Insecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices) | 中 | 4.3 |
| 2023年9月 | 3320355 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management) | 严重 | 9.9 |
| 2023年9月 | 3370490 | Insufficient File type validation in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) | 高 | 8.7 |
| 2023年9月 | 3352453 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System) | 中 | 5.3 |
| 2023年8月 | 3317710 | Binary hijack in SAP BusinessObjects Business Intelligence (Installer) | 高 | 7.6 |
| 2023年8月 | 3312586 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform | 中 | 4.4 |
| 2023年7月 | 3320702 | Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform | 中 | 5.9 |
| 2023年5月 | 3307833 | Information Disclosure in SAP BusinessObjects Intelligence Platform | 严重 | 9.1 |
| 2023年5月 | 3313484 | Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform | 中 | 6.3 |
| 2023年5月 | 3309935 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform | 中 | 6.1 |
| 2023年5月 | 3319400 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform | 中 | 6.1 |
| 2023年5月 | 3038911 | Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service) | 中 | 5.0 |
| 2023年5月 | 3302595 | Information Disclosure vulnerability in SAP BusinessObjects Platform | 低 | 3.7 |
| 2023年2月 | 3263135 | SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. | 高 | 8.5 |
| 2023年2月 | 3263863 | In SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430, some calls return json with wrong content type in the header of the response. | 中 | 4.3 |
| 2023年1月 | 3251447 | Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence) | 中 | 4.6 |