CVE-2026-0485CWE-405

Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform

High · published February 10, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

⚡ An unauthenticated attacker can cause the Content Management Server (CMS) to crash, like a prankster pulling the fire alarm at a crowded event! 🔥 Picture a restaurant where a mischievous diner keeps sending back dishes they never ordered, causing the kitchen to constantly restart service chaos. That's what's happening here with the CMS—persistent disruptions leading to a total service meltdown! If exploited, this vulnerability could keep your CMS unavailable for extended periods, disrupting access for users and potentially crippling operations. While data remains safe, the constant crashes mean your vital services could be out of commission for anyone trying to access them!

Put simply

Picture a restaurant where a mischievous diner keeps sending back dishes they never ordered, causing the kitchen to constantly restart service chaos. That's what's happening here with the CMS—persistent disruptions leading to a total service meltdown! CVE-2026-0485 allows unauthenticated attackers to send crafted requests to the SAP BusinessObjects BI Platform's Content Management Server, forcing it to crash and restart repeatedly. This can lead to significant service interruptions without compromising data integrity or confidentiality.

What to do

If exploited, this vulnerability could keep your CMS unavailable for extended periods, disrupting access for users and potentially crippling operations. While data remains safe, the constant crashes mean your vital services could be out of commission for anyone trying to access them! To secure your system, apply the latest patches for the SAP BusinessObjects BI Platform and monitor for unusual request patterns that could indicate exploitation attempts. Regularly audit your system to ensure robust security measures are in place! You've got this! With these steps, you'll be back in control and your CMS will be operational in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.8th percentile
Weakness
CWE-405 · Asymmetric Resource Consumption (Amplification)
Published
2026-02-10T03:00Z
EPSS history
Timeline
  • 10 FEB 03:00Z
    Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform
    cvelistv5