CVE-2025-0061 — Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform

CVE-2025-0061

Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform PUBLISHED

Description (CNA)

SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP BusinessObjects Business Intelligence Platform	affected ENTERPRISE 420; affected 430; affected 2025

CWE

CWE-497

References

https://me.sap.com/notes/3474398
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.