Businessobjects Webintelligence — known CVE vulnerabilities

Every CVE whose affected-product data names Businessobjects Webintelligence, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2003-1249 — CVSS 7.5 (high): WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.
• CVE-2005-4274 — CVSS 5.0 (medium): Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service (user account lock…
• CVE-2004-0534 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows…
• CVE-2004-0533 — CVSS 2.1 (low): Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users…