PT-2026-7204 · Sap · Sap Businessobjects Bi Platform

Published 2026-02-10 · Updated 2026-02-15 · CVE-2026-0490

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI Platform (affected versions not specified)

Description An unauthenticated attacker can send a crafted network request to the trusted endpoint, bypassing authentication and preventing legitimate users from accessing the platform. This impacts the availability of the system. There is no impact on the confidentiality or integrity of data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-0490

Affected Products

Sap Businessobjects Bi Platform

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-0490 · Security Note
• https://osv.dev/vulnerability/CVE-2026-0490 · Vendor Advisory
• https://url.sap/sapsecuritypatchday · Vendor Advisory
• https://twitter.com/vuldb/status/2021124260698444204 · Twitter Post
• https://twitter.com/RedPacketSec/status/2021099955029450786 · Twitter Post
• https://twitter.com/cracbot/status/2022989316964909271 · Twitter Post
• https://me.sap.com/notes/3654236 · Note
• https://t.me/cveNotify/151513 · Telegram Post