Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-0061

Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform

Description

SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BusinessObjects Business Intelligence Platform

Default version status: unaffected

  • ENTERPRISE 420affected
  • 430affected
  • 2025affected

References