CVE-2026-58248
published 2026-08-11CVE-2026-58248: SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file…
PriorityP342medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.44%
37.6th percentile
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external references. When the file is processed as a data source, the affected component resolves these references and exposes the contents of sensitive server-side files within the resulting report. This results in a high impact on confidentiality, with no impact on integrity and availability.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_businessobjects_business_intelligence | — | — |
| sap_se | sap_businessobjects_business_intelligence | — | — |
| sap_se | sap_businessobjects_business_intelligence | — | — |
| sap_se | sap_businessobjects_business_intelligence | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external references.
ghsa_unreviewed·2026-08-11
CVE-2026-58248 [MEDIUM] CWE-611 SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external references.
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external references. When the file is processed as a data source, the affected component resolves these references and exposes the contents of sensitive server-side files within the resulting report. This results in a high impact on confidentiality, with no impact on integrity and availability.
VulDB
SAP BusinessObjects Business Intelligence Platform Web Intelligence information disclosure
vuldb·2026-08-11·CVSS 6.5
CVE-2026-58248 [MEDIUM] SAP BusinessObjects Business Intelligence Platform Web Intelligence information disclosure
A vulnerability categorized as problematic has been discovered in SAP BusinessObjects Business Intelligence Platform 2025/2027/ENTERPRISE 430/ENTERPRISECLIENTTOOLS 430. This vulnerability affects unknown code of the component Web Intelligence. Such manipulation leads to information disclosure.
This vulnerability is uniquely identified as CVE-2026-58248. The attack can be launched remotely. No exploit exists.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-11
Published