Vulnerabilities (CVE)

Filtered by vendor Sap Subscribe
Filtered by product Businessobjects
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-3980 1 Sap 1 Businessobjects 2010-10-19 4.0 MEDIUM N/A
Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI.
CVE-2010-3979 1 Sap 1 Businessobjects 2010-10-19 5.0 MEDIUM N/A
Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid username, which allows remote attackers to enumerate account names via a login SOAPAction to the dswsbobje/services/session URI.