Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-25646

Information Disclosure vulnerability in SAP BusinessObjects Web Intelligence

Description

Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BusinessObjects Web Intelligence

Default version status: unaffected

  • 420affected
  • 430affected
  • 440affected

References