CVE-2025-31332

7.1 highEPSS 0.1%

High (7.1) in sap businessobjects business intelligence platform. EPSS 0.1% chance of exploitation in the next 30 days.

Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this vulnerability does not disclose any sensitive data.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-277
Published: 2025-04-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:businessobjects_business_intelligence_platform

References

https://me.sap.com/notes/3565751
https://url.sap/sapsecuritypatchday

Check your stack JSON