CVE record · 1 source
CVE-2026-109168
CVSS 6.5lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to list other business objects'…
- Vendor
- SAP
- Product
- BusinessObjects
- CVSS
- 6.5
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to list other business objects'…
lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to list other business objects' file attachments by supplying an arbitrary bizId to the listFileByBizId…