CVE-2018-2473: Medium severity sap businessobjects business intelligence platform vulnerability

Published Nov 13, 2018

Updated

SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.

Affected Software

2 affected components

SAP BusinessObjects Business Intelligence=4.1

SAP BusinessObjects Business Intelligence=4.2

Event History

Nov 13, 2018

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this SAP BusinessObjects Business Intelligence Platform Server vulnerability?

The vulnerability ID for this SAP BusinessObjects Business Intelligence Platform Server vulnerability is CVE-2018-2473.

What is the title of this SAP BusinessObjects Business Intelligence Platform Server vulnerability?

The title of this SAP BusinessObjects Business Intelligence Platform Server vulnerability is 'SAP BusinessObjects Business Intelligence Platform Server versions 4.1 and 4.2 when using Web Intelligence Richclient 3 tiers mode gateway Denial of Service (DoS) Vulnerability.'

What is the severity of CVE-2018-2473?

The severity of CVE-2018-2473 is medium (6.5).

What are the affected versions of SAP BusinessObjects Business Intelligence Platform Server?

The affected versions of SAP BusinessObjects Business Intelligence Platform Server are 4.1 and 4.2.

How can an attacker exploit this SAP BusinessObjects Business Intelligence Platform Server vulnerability?

An attacker can prevent legitimate users from accessing a service by crashing or flooding the service.