What is CVE-2025-0061?

CVE-2025-0061 is a high-severity vulnerability in Sap Businessobjects_business_intelligence_platform, classified under Exposure of Sensitive System Information to an Unauthorized Control Sphere. CVSS score: 8.7/10. Published 2025-01-14.

How severe is CVE-2025-0061?

High severity. CVSS v3 base score is 8.7 out of 10.

Vulnerability in Sap Businessobjects_business_intelligence_platform

CVE-2025-0061

SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modif…

EPSS: 0.005 (39.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.7 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N.

Affected products

Sap Businessobjects_business_intelligence_platform — versions 420, 430, 2025
Sap_se Sap Businessobjects Business Intelligence Platform — versions ENTERPRISE 420, 430, 2025

Weakness classification (CWE)

CWE-497 — Exposure of Sensitive System Information to an Unauthorized Control Sphere

References

cna@sap.com (Permissions Required)
cna@sap.com (Patch)

Frequently asked questions

What is CVE-2025-0061?: CVE-2025-0061 is a high-severity vulnerability in Sap Businessobjects_business_intelligence_platform, classified under Exposure of Sensitive System Information to an Unauthorized Control Sphere. CVSS score: 8.7/10. Published 2025-01-14.
How severe is CVE-2025-0061?: High severity. CVSS v3 base score is 8.7 out of 10.