FeedlyFeedly
CVEsCVEs
Threat IntelligenceThreat Intelligence
Threat IntelligenceThreat Intelligence
Log in
ChangelogChangelog
ChangelogChangelog
Log in
Log in
Start Free Trial
Start Free Trial
FeedlyFeedly
CVEsCVEs
Threat IntelligenceThreat Intelligence
Threat IntelligenceThreat Intelligence
Log in
ChangelogChangelog
ChangelogChangelog
Log in
Log in
Start Free Trial
Start Free Trial

CVE-2019-0268

XML Injection (aka Blind XPath Injection) (CWE-91)

Published: Mar 12, 2019 / Updated: 69mo ago

010
No CVSS yetEPSS 0.22%
CVE info copied to clipboard

SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an untrusted source.

Timeline

First Article

Feedly found the first article mentioning CVE-2019-0268. See article

Mar 12, 2019 at 10:03 PM / www.securityfocus.com
EPSS

EPSS Score was set to: 0.22% (Percentile: 59.3%)

Sep 27, 2023 at 5:31 PM
Static CVE Timeline Graph

Affected Systems

Sap/businessobjects_business_intelligence
+null more

Patches

wiki.scn.sap.com
+null more

Attack Patterns

CAPEC-250: XML Injection
+null more

News

CVE-2019-0268 | SAP Business Intelligence Platform 4.10/4.20/4.30 XML Validator XML Document xml injection (BID-107364)
VulDB Updates / 54mo
A vulnerability was found in SAP Business Intelligence Platform 4.10/4.20/4.30 and classified as critical . This issue affects some unknown processing of the component XML Validator . The manipulation as part of XML Document leads to xml injection. The identification of this vulnerability is CVE-2019-0268 . The attack may be initiated remotely. There is no exploit available.

CVSS V3.1

Unknown

Categories

CWE-91(97)Sap(1514)

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI

Feedly Threat Intelligence30-day free trial