PT-2026-7201 · Sap · Sap Businessobjects Bi Platform

Publicado 2026-02-10 · Atualizado 2026-02-15 · CVE-2026-0485

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI Platform (affected versions not specified)

Description An unauthenticated attacker can send specially crafted requests to the Content Management Server (CMS), potentially causing it to crash and automatically restart. Repeated submissions of these requests could lead to a persistent service disruption, rendering the CMS unavailable. This exploitation results in a high impact on availability, with no impact on confidentiality or integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-405

Identificadores relacionados

CVE-2026-0485

Produtos afetados

Sap Businessobjects Bi Platform

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-0485 · Nota de Segurança
• https://me.sap.com/notes/3678282 · Nota
• https://url.sap/sapsecuritypatchday · Aviso do Fabricante
• https://twitter.com/cracbot/status/2022989313169109302 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-0485 · Aviso do Fabricante
• https://twitter.com/RedPacketSec/status/2021099953783713985 · Publicação no Twitter
• https://t.me/cveNotify/151510 · Publicação no Telegram