CVE-2004-0533: Businessobjects Infoview

Low severity, CVSS 2.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.

Affected products

• Businessobjects Infoview: version 5.1.4 only; version 5.1.5 only; version 5.1.6 only; version 5.1.7 only; version 5.1.8 only
• Businessobjects Webintelligence: version 2.7 only; version 2.7.1 only; version 2.7.2 only; version 2.7.3 only; version 2.7.4 only

Published 2004-12-31. Last modified 2026-06-16.