PT-2025-24583 · Sap · Sap Businessobjects Business Intelligence

CVE-2025-23192 · Publicado 2025-06-10 · Atualizado 2025-06-10

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence (BI Workspace) (affected versions not specified)

Description The issue allows an unauthenticated attacker to craft and store malicious script within a workspace. When the victim accesses the workspace, the script will execute in their browser, enabling the attacker to potentially access sensitive session information, modify or make browser information unavailable. This leads to a high impact on confidentiality and low impact on integrity and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2025-06761

CVE-2025-23192

Produtos afetados

Sap Businessobjects Business Intelligence

Referências · 8

• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/june-2025.html · Nota
• https://url.sap/sapsecuritypatchday · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2025-23192 · Nota de Segurança
• https://me.sap.com/notes/3560693 · Nota
• https://t.me/latest_high_impact_cve/2595 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-23192 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-06761 · Nota de Segurança
• https://t.me/cvetracker/25840 · Publicação no Telegram