CVE-2025-43000CWE-862

Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW)

High · published May 13, 2025

CVSS v3.1
7.9
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application.

The record
Technical detail
CVSS v3.1
7.9 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-05-13T00:17Z
EPSS history
Timeline
  • 13 MAY 00:17Z
    Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW)
    cvelistv5