CVE-2026-24324CWE-405

Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)

Medium · published February 10, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker with user privileges to execute a specific query in AdminTools that could cause the Content Management Server (CMS) to crash, rendering the CMS partially or completely unavailable and resulting in the denial of service of the Content Management Server (CMS). Successful exploitation impacts system availability, while confidentiality and integrity remain unaffected.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.5th percentile
Weakness
CWE-405 · Asymmetric Resource Consumption (Amplification)
Published
2026-02-10T03:04Z
EPSS history
Timeline
  • 10 FEB 03:04Z
    Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)
    cvelistv5