SAP Businessobjects XI vulnerabilities

2 CVEs affecting SAP Businessobjects XI, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7730, published 2015-10-15.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-7730, published 2015-10-15. High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days. SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial of service (out-of-bounds read and listener crash) via a…
• CVE-2014-8309, published 2014-10-16. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. SAP BusinessObjects 4.0 and BusinessObjects XI (BOXI) R2 and 3.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which…