CVE-2026-0502 — Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform

CVE-2026-0502

Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform PUBLISHED

Description (CNA)

Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send unintended requests to the web server. This has low impact on integrity and availability of the application. There is no impact on confidentiality of the data.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP BusinessObjects Business Intelligence Platform	affected ENTERPRISE 430; affected 2025; affected 2027

CWE

CWE-352

References

https://me.sap.com/notes/3667593
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.