SAP_SE SAP BusinessObjects Business Intelligence Platform

Name: SAP_SE SAP BusinessObjects Business Intelligence Platform
Brand: SAP_SE

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical6high10medium0low

updated 2026-10-27

vulnerabilities (45)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-38819US	—	56.0% (99th)	Exploit	no fix	2024-12-19	3 versions
CVE-2024-41730US	critical9.8OT high	75.9% (100th)	—	no fix	2024-08-13	2 versions
CVE-2024-38286US	high7.5	1.69% (77th)	—	no fix	2024-11-07	3 versions
CVE-2023-36917US	high7.5	0.58% (48th)	—	no fix	2023-07-11	2 versions
CVE-2024-28165US	critical9.3	0.56% (47th)	—	no fix	2024-05-14	2 versions
CVE-2023-0020US	high7.1	0.52% (44th)	—	no fix	2023-02-14	2 versions
CVE-2025-24876US	—	0.50% (42nd)	—	no fix	2025-02-11	3 versions
CVE-2025-0061US	critical9.1	0.49% (42nd)	—	no fix	2025-01-14	3 versions
CVE-2023-30740US	high7.6	0.46% (40th)	—	no fix	2023-05-09	2 versions
CVE-2023-31406US	medium6.1	0.46% (39th)	—	no fix	2023-05-09	2 versions
CVE-2025-27434US	—	0.45% (39th)	—	no fix	2025-03-11	3 versions
CVE-2025-26661US	—OT elevated	0.42% (36th)	—	no fix	2025-03-11	3 versions
CVE-2024-39592US	medium6.5OT elevated	0.42% (36th)	—	no fix	2024-07-09	3 versions
CVE-2025-0060US	medium6.5	0.41% (35th)	—	no fix	2025-01-14	3 versions
CVE-2023-30741US	medium6.1	0.39% (33rd)	—	no fix	2023-05-09	2 versions
CVE-2025-0071US	—	0.38% (32nd)	—	no fix	2025-03-11	3 versions
CVE-2024-41731US	medium4.3	0.37% (31st)	—	no fix	2024-08-13	2 versions
CVE-2024-42375US	medium4.3	0.36% (29th)	—	no fix	2024-08-13	2 versions
CVE-2024-28166US	medium4.3	0.34% (28th)	—	no fix	2024-08-13	2 versions
CVE-2026-0508US	high8.1	0.32% (25th)	—	no fix	2026-02-10	3 versions
CVE-2025-23194US	—OT elevated	0.32% (25th)	—	no fix	2025-03-11	3 versions
CVE-2024-32732US	—	0.32% (25th)	—	no fix	2024-12-10	2 versions
CVE-2025-42896US	—	0.32% (25th)	—	no fix	2025-12-09	3 versions
CVE-2025-26660US	—	0.30% (23rd)	—	no fix	2025-03-11	3 versions
CVE-2024-41736US	medium4.3	0.30% (22nd)	—	no fix	2024-08-13	3 versions
CVE-2025-26658US	—OT elevated	0.29% (22nd)	—	no fix	2025-03-11	3 versions
CVE-2025-23185US	—	0.29% (22nd)	—	no fix	2025-03-11	3 versions
CVE-2025-0062US	—	0.28% (20th)	—	no fix	2025-03-11	6 versions
CVE-2025-27433US	—	0.27% (20th)	—	no fix	2025-03-11	3 versions
CVE-2025-25242US	—	0.25% (17th)	—	no fix	2025-03-11	3 versions
CVE-2025-27430US	—	0.25% (16th)	—	no fix	2025-03-11	3 versions
CVE-2025-26656US	—OT elevated	0.24% (15th)	—	no fix	2025-03-11	3 versions
CVE-2025-23188US	—OT elevated	0.24% (15th)	—	no fix	2025-03-11	3 versions
CVE-2025-26659US	—	0.24% (15th)	—	no fix	2025-03-11	3 versions
CVE-2025-25245US	medium6.1	0.24% (14th)	—	no fix	2025-03-11	3 versions
CVE-2025-27431US	—	0.22% (13th)	—	no fix	2025-03-11	3 versions
CVE-2025-26655US	—OT elevated	0.22% (13th)	—	no fix	2025-03-11	3 versions
CVE-2025-25244US	—OT elevated	0.21% (11th)	—	no fix	2025-03-11	3 versions
CVE-2025-27432US	—OT elevated	0.19% (9th)	—	no fix	2025-03-11	3 versions
CVE-2026-27683US	—	0.18% (8th)	—	no fix	2026-04-14	3 versions
CVE-2026-24318US	—	0.17% (6th)	—	no fix	2026-04-14	3 versions
CVE-2024-45281US	—	0.16% (6th)	—	no fix	2024-09-10	≤ 430
CVE-2025-31332US	high7.1	0.15% (4th)	—	no fix	2025-04-08	≤ ENTERPRISE 430
CVE-2024-34684US	medium6.0	0.14% (4th)	—	no fix	2024-06-11	3 versions
CVE-2026-0502US	—	0.12% (2nd)	—	no fix	2026-05-12	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10 CVEs
CWE-862Missing Authorization9 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-639Authorization Bypass Through User-Controlled Key2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)24 CVEs
EUEU Vulnerability Database (ENISA)22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan