CVE-2018-2467

MEDIUM

SAP BusinessObjects BI Platform <4.3 - Info Disclosure

Title source: llm

Description

In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web Browser such as Chrome the system returns an error with the path of the used application server.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095

Permissions Required x_refsource_misc

https://launchpad.support.sap.com/#/notes/2623618

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/105544

Scores

CVSS v3 5.3

EPSS 0.0025

EPSS Percentile 47.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

Status published

Products (2)

sap/businessobjects_bi_platform 4.1

sap/businessobjects_bi_platform 4.2

Published Oct 09, 2018

Tracked Since Feb 18, 2026