Unvalidated Redirect Vulnerability in SAP BusinessObjects Business Intelligence Platform

CVE-2026-0508

What is CVE-2026-0508?

The SAP BusinessObjects Business Intelligence Platform contains a vulnerability that enables an authenticated attacker with elevated privileges to inject malicious URLs. If a victim interacts with the malicious URL, they may be redirected to an external, attacker-controlled site. This could lead to unauthorized downloads of harmful content, compromising the confidentiality and integrity of the application while leaving availability intact.

References