CVE-2025-0061CWE-497

Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform

High · published January 14, 2025

CVSS v3.1
8.7
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00494 · 41.5th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-01-14T00:09Z
EPSS history
Timeline
  • 14 JAN 00:09Z
    Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
    cvelistv5