PT-2025-6120 · Sap · Sap Businessobjects Business Intelligence Platform

Published 2025-02-11 · Updated 2025-02-16 · CVE-2025-0064

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence platform (affected versions not specified)

Description: The Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-0064

Affected Products

Sap Businessobjects Business Intelligence Platform

References · 13

• https://osv.dev/vulnerability/CVE-2025-0064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0064 · Security Note
• https://url.sap/sapsecuritypatchday · Patch
• https://t.me/cvedetector/17634 · Telegram Post
• https://twitter.com/gbhackers_news/status/1889289392008642588 · Twitter Post
• https://twitter.com/cybercronai/status/1889615899746828746 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1889306005760069804 · Twitter Post
• https://twitter.com/CveFindCom/status/1889117850633228557 · Twitter Post
• https://twitter.com/cracbot/status/1891080164723019973 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1889218093895078202 · Twitter Post
• https://t.me/latest_high_impact_cve/1813 · Telegram Post
• https://twitter.com/CVEnew/status/1889116931652808848 · Twitter Post
• https://me.sap.com/notes/3525794 · Note