CVE-2004-0533: Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which all...

Security readout for executives and security teams

CVE-2004-0533 affects Business Objects WebIntelligence 2.7.0 through 2.7.4. The product reportedly trusted client-side access controls, allowing a logged-in remote user to delete files on the server through a crafted InfoView delete request. Business impact depends on whether this legacy product still exists in production or archives. Exposure is likely limited to organizations still running Business Objects WebIntelligence 2.7.0 through 2.7.4, especially if InfoView is reachable by broad internal or external authenticated user populations. Treat this as urgent only if the legacy WebIntelligence versions are still present. The risk is serious because authenticated users could delete server files, but the exposure window is constrained by product age, version range, and authentication requirement. Mitigation focus: Identify any Business Objects WebIntelligence 2.7.0 through 2.7.4 deployments.; Check vendor or archived advisory guidance for supported fixes or upgrade paths.; Restrict InfoView access to trusted users while remediation is assessed..

Prepared

Jun 29, 2026, 22:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.