sap businessobjects

Name: sap businessobjects
Brand: sap

productUS

cpe:2.3:a:sap:businessobjects:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical10high11medium1low

updated 2026-10-27

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2010-0219US	high10.0	90.9% (100th)	Exploit	no fix	2010-10-18	= 3.2
CVE-2014-9387US	high10.0	4.61% (92nd)	—	no fix	2014-12-17	= 4.1
CVE-2015-7730US	high10.0	3.63% (89th)	—	no fix	2015-10-15	= 4.1
CVE-2014-8310US	high7.1	2.92% (87th)	—	no fix	2014-10-16	= 4.0
CVE-2014-8308US	medium4.3	2.23% (83rd)	—	no fix	2014-10-16	= 4.0
CVE-2019-0259US	critical9.8	2.02% (81st)	—	no fix	2019-02-15	2 versions
CVE-2014-8311US	low3.5	1.77% (78th)	—	no fix	2014-10-16	= 4.0
CVE-2010-3983US	high9.0	1.70% (77th)	—	no fix	2010-10-18	= 3.2
CVE-2019-0287US	high7.6	1.69% (77th)	—	no fix	2019-05-14	2 versions
CVE-2014-8309US	medium5.0	1.67% (77th)	—	no fix	2014-10-16	= 4.0
CVE-2018-2408US	high7.3	1.54% (75th)	—	no fix	2018-04-10	4 versions
CVE-2017-16683US	medium6.5	1.41% (73rd)	—	no fix	2017-12-12	2 versions
CVE-2010-3982US	medium5.0	1.32% (71st)	—	no fix	2010-10-18	= 3.2
CVE-2010-3979US	medium5.0	1.17% (67th)	—	no fix	2010-10-18	= 3.2
CVE-2014-3134US	medium4.3	1.16% (67th)	—	no fix	2014-04-30	—
CVE-2019-0251US	medium6.1	1.14% (66th)	—	no fix	2019-02-15	2 versions
CVE-2019-0289US	high7.1	1.08% (65th)	—	no fix	2019-05-14	2 versions
CVE-2010-3980US	medium4.0	0.93% (61st)	—	no fix	2010-10-18	= 3.2
CVE-2010-3981US	medium4.3	0.89% (59th)	—	no fix	2010-10-18	= 3.2
CVE-2019-0303US	medium6.1	0.80% (56th)	—	no fix	2019-06-14	2 versions
CVE-2023-28764US	medium5.9	0.51% (43rd)	—	no fix	2023-05-09	2 versions
CVE-2023-40623US	high7.1	0.44% (38th)	—	no fix	2023-09-12	2 versions
CVE-2022-28214US	high7.8OT elevated	0.17% (7th)	—	no fix	2022-05-11	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-264CWE-2642 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-1386Insecure Operation on Windows Junction / Mount Point1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-255CWE-2551 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.