Remote Code Execution Vulnerability in SAP BusinessObjects Business Intelligence Platform

CVE-2025-42896

What is CVE-2025-42896?

The SAP BusinessObjects Business Intelligence Platform is susceptible to a vulnerability that allows unauthenticated remote attackers to exploit URL parameters associated with the login page. By sending specifically crafted requests, attackers can manipulate the server to fetch unauthorized URLs they supply. This flaw poses a potential risk to data confidentiality and integrity, enabling malicious actors to exploit the system for unauthorized information access.

References