VULNERABILITY INTELLIGENCE

CVE-2019-0398

CVSS score8.8 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2019-12-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references