Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-25646

Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application.

Published

2024-04-09T01:15:48.343

Last Modified

2025-10-29T14:08:12.403

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.7 (HIGH)

Weaknesses

Type: Secondary
CWE-732

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sap	businessobjects_web_intelligence	420	Yes
Application	sap	businessobjects_web_intelligence	430	Yes
Application	sap	businessobjects_web_intelligence	440	Yes

References

https://me.sap.com/notes/3421384 Permissions Required ([email protected])
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 Patch ([email protected])
https://me.sap.com/notes/3421384 Permissions Required (af854a3a-2127-422b-91ae-364da2661108)
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 Patch (af854a3a-2127-422b-91ae-364da2661108)