CSRF Vulnerability in SAP BusinessObjects Business Intelligence Platform

CVE-2026-0502

What is CVE-2026-0502?

An insufficient Cross-Site Request Forgery (CSRF) protection mechanism in the SAP BusinessObjects Business Intelligence Platform allows authenticated users to be deceived by an attacker, leading to unintended requests sent to the web server. While this vulnerability compromises integrity and availability, data confidentiality remains intact. It emphasizes the need for robust CSRF protections in critical web applications.

References