What’s Vulnerable › Vulnerabilities
CVE-2024-28166: Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-08-13 · updated 2026-06-17
- Weakness: CWE-434
Description
SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application.
Affected products
- SAP SE SAP BusinessObjects Business Intelligence Platform (Visual Difference Application): 430, 440, enterprise_420
References
Get alerted when CVE-2024-28166 or the next vulnerability affects your stack