CVE-2025-0061

published 2025-01-14

CVE-2025-0061: SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user…

critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
sap	businessobjects_business_intelligence_platform	—	—
sap	businessobjects_business_intelligence_platform	—	—
sap	businessobjects_business_intelligence_platform	—	—
sap_se	sap_businessobjects_business_intelligence_platform	—	—
sap_se	sap_businessobjects_business_intelligence_platform	—	—
sap_se	sap_businessobjects_business_intelligence_platform	—	—

CWE-497