CVE-2026-24324 — Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)

CVE-2026-24324

Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools) PUBLISHED

Description (CNA)

SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker with user privileges to execute a specific query in AdminTools that could cause the Content Management Server (CMS) to crash, rendering the CMS partially or completely unavailable and resulting in the denial of service of the Content Management Server (CMS). Successful exploitation impacts system availability, while confidentiality and integrity remain unaffected.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP BusinessObjects Business Intelligence Platform (AdminTools)	affected ENTERPRISE 430; affected 2025; affected 2027

CWE

CWE-405

References

https://me.sap.com/notes/3695912
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.