CVE 7.3 HIGH

Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform_CVE-2026-0508

7.3 / 10
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N

Description

The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application. Upon successful exploitation, the victim may click on this malicious URL, resulting in an unvalidated redirect to the attacker-controlled domain and subsequently download the malicious content. This vulnerability has a high impact on the confidentiality and integrity of the application, with no effect on the availability of the application.

Basic Information

ID CVE-2026-0508
Source sap
Published Feb 10, 2026 at 03:01

Affected Product

Vendor SAP_SE
Product SAP BusinessObjects Business Intelligence Platform
Version ENTERPRISE 430
Affected Versions SAP_SE SAP BusinessObjects Business Intelligence Platform ENTERPRISE 430
SAP_SE SAP BusinessObjects Business Intelligence Platform 2025
SAP_SE SAP BusinessObjects Business Intelligence Platform 2027

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.