CVE-2018-2447: SAP Businessobjects Business Intelligence

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database.

Affected products

• SAP Businessobjects Business Intelligence: version 4.2 only

Published 2018-08-14. Last modified 2026-06-17.