PT-2026-7201 · Sap · Sap Businessobjects Bi Platform

Published 2026-02-10 · Updated 2026-02-15 · CVE-2026-0485

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI Platform (affected versions not specified)

Description An unauthenticated attacker can send specially crafted requests to the Content Management Server (CMS), potentially causing it to crash and automatically restart. Repeated submissions of these requests could lead to a persistent service disruption, rendering the CMS unavailable. This exploitation results in a high impact on availability, with no impact on confidentiality or integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-405

Related Identifiers

CVE-2026-0485

Affected Products

Sap Businessobjects Bi Platform

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-0485 · Security Note
• https://url.sap/sapsecuritypatchday · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-0485 · Vendor Advisory
• https://me.sap.com/notes/3678282 · Note
• https://twitter.com/cracbot/status/2022989313169109302 · Twitter Post
• https://twitter.com/RedPacketSec/status/2021099953783713985 · Twitter Post
• https://t.me/cveNotify/151510 · Telegram Post