PT-2025-10669 · Sap · Sap Businessobjects Business Intelligence Platform

Published 2025-03-11 · Updated 2025-10-24 · CVE-2025-25245

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (affected versions not specified)

Description The issue concerns a deprecated web application endpoint that is not properly secured, allowing an attacker to inject a malicious URL in the data returned to the user. This could lead to a limited impact on confidentiality and integrity within the scope of the victim's browser, with no impact on availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-03627

CVE-2025-25245

Affected Products

Sap Businessobjects Business Intelligence Platform

References · 9

• https://url.sap/sapsecuritypatchday · Patch
• https://bdu.fstec.ru/vul/2025-03627 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-25245 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25245 · Vendor Advisory
• https://me.sap.com/notes/3557469 · Note
• https://t.me/cveNotify/140268 · Telegram Post
• https://t.me/cvetracker/18867 · Telegram Post
• https://t.me/cvedetector/20019 · Telegram Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2025.html · Note