PT-2026-32551 · Sap · Sap Businessobjects Business Intelligence Platform

Published 2026-04-14 · Updated 2026-04-14 · CVE-2026-24318

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform (affected versions not specified)

Description Insecure session management allows an unauthenticated attacker to obtain and reuse valid session tokens to gain unauthorized access to a victim's session. If the application accepts previously issued tokens after authentication, the attacker can assume the victim's authenticated context to access or modify information within the session scope, impacting confidentiality and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-539

Related Identifiers

CVE-2026-24318

Affected Products

Sap Businessobjects Business Intelligence Platform

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-24318 · Security Note
• https://me.sap.com/notes/3702191 · Note
• https://twitter.com/CVEnew/status/2043976170346045513 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEarity/status/2044031612904722565 · Twitter Post