CVE-2024-25646CWE-732

Information Disclosure vulnerability in SAP BusinessObjects Web Intelligence

High · published April 9, 2024

CVSS v3.1
7.7
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.2th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2024-04-09T00:47Z
EPSS history
Timeline
  • 09 APR 00:47Z
    Information Disclosure vulnerability in SAP BusinessObjects Web Intelligence
    cvelistv5