CVE-2025-31332CWE-277

Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform

Medium · published April 8, 2025

CVSS v3.1
6.6
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this vulnerability does not disclose any sensitive data.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.9th percentile
Weakness
CWE-277 · Insecure Inherited Permissions
Published
2025-04-08T07:15Z
EPSS history
Timeline
  • 08 APR 07:15Z
    Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform
    cvelistv5