What’s Vulnerable › Products

SAP SE SAP BusinessObjects Business Intelligence Platform (BI Workspace) vulnerabilities

47 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your SAP SE SAP BusinessObjects Business Intelligence Platform (BI Workspace) version is affected

Latest SAP SE SAP BusinessObjects Business Intelligence Platform (BI Workspace) vulnerabilities

• CVE-2026-58248 — XML External Entity Injection in SAP BusinessObjects Business Intelligence (CVSS 6.5)
• CVE-2025-31326 — HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (CVSS 4.1)
• CVE-2025-23192 — Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace) (CVSS 7.6)
• CVE-2024-37179 — Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (CVSS 6.5)
• CVE-2023-40622 — Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management) (CVSS 9.9)
• CVE-2023-37489 — Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System) (CVSS 5.3)
• CVE-2023-39440 — Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (CVSS 4.4)
• CVE-2023-37490 — Binary hijack in SAP BusinessObjects Business Intelligence (Installer) (CVSS 9.0)
• CVE-2023-36917 — Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform (CVSS 7.5)
• CVE-2023-31406 — Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (CVSS 6.1)
• CVE-2023-31404 — Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service) (CVSS 5.0)
• CVE-2023-30741 — Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (CVSS 6.1)
• CVE-2023-30740 — Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (CVSS 7.6)
• CVE-2023-28762 — Information Disclosure in SAP BusinessObjects Intelligence Platform (CVSS 7.2)
• CVE-2023-28765 — Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management ) (CVSS 9.8)
• CVE-2023-27896 — Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform (CVSS 7.5)
• CVE-2023-27894 — Sensitive Information Disclosure in the SAP BusinessObjects Business Intelligence platform (CVSS 5.3)
• CVE-2022-41203 — (CVSS 8.8)
• CVE-2022-41206 — (CVSS 5.4)
• CVE-2022-39800 — (CVSS 6.1)
• CVE-2022-35296 — (CVSS 4.9)
• CVE-2022-32244 — (CVSS 5.2)
• CVE-2022-32245 — (CVSS 8.2)
• CVE-2022-28214 — (CVSS 7.8)
• CVE-2021-33697 — (CVSS 6.1)