CVE-2025-25245

6.1 mediumEPSS 0.2%

Medium (6.1) in sap businessobjects business intelligence platform. EPSS 0.2% chance of exploitation in the next 30 days.

SAP BusinessObjects Business Intelligence Platform (Web Intelligence) contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a limited impact on confidentiality and integrity within the scope of victim�s browser. There is no impact on availability.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-03-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:businessobjects_business_intelligence_platform

References

https://me.sap.com/notes/3557469
https://url.sap/sapsecuritypatchday

Check your stack JSON