JavaScript Injection Vulnerability in SAP BusinessObjects by SAP

CVE-2025-0062

What is CVE-2025-0062?

The SAP BusinessObjects Business Intelligence Platform is vulnerable to a JavaScript injection flaw that enables attackers to execute malicious JavaScript code within Web Intelligence reports. When enabled by administrators in the Central Management Console, this vulnerability allows the injected code to run in a victim's browser upon accessing the compromised page. While this impacts the confidentiality and integrity of user data viewed in a browser, the system's overall availability remains unaffected.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References