CVE-2026-0485 — Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform

CVE-2026-0485

Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform PUBLISHED

Description (CNA)

SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause the Content Management Server (CMS) to crash and automatically restart. By repeatedly submitting these requests, the attacker could induce a persistent service disruption, rendering the CMS completely unavailable. Successful exploitation results in a high impact on availability, while confidentiality and integrity remain unaffected.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP BusinessObjects BI Platform	affected ENTERPRISE 430; affected 2025; affected 2027

CWE

CWE-405

References

https://me.sap.com/notes/3678282
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.