Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2004-0533

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.
0
0
Attacker Value
Unknown

CVE-2004-0534

Disclosure Date: September 17, 2004 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.
0
0
Attacker Value
Unknown

CVE-2003-1249

Disclosure Date: December 31, 2003 (last updated February 22, 2025)
WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.
0
0