Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-0064

Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BusinessObjects Business Intelligence platform (Central Management Console)

Default version status: unaffected

  • ENTERPRISE 430affected
  • 2025affected

References