CVE-2025-0061

9.1 criticalEPSS 0.5%

Critical (9.1) in sap businessobjects business intelligence platform. EPSS 0.5% chance of exploitation in the next 30 days.

SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-497
Published: 2025-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:businessobjects_business_intelligence_platform

References

https://me.sap.com/notes/3474398
https://url.sap/sapsecuritypatchday

Check your stack JSON