Insecure Session Management in SAP Business Objects Business Intelligence Platform

CVE-2026-24318

What is CVE-2026-24318?

An insecure session management vulnerability exists in the SAP Business Objects Business Intelligence Platform that allows an unauthenticated attacker to exploit valid session tokens. By reusing these tokens, the attacker can seize control of an authenticated user's session, potentially leading to unauthorized access and manipulation of sensitive information. This increases the risk to data confidentiality and integrity, as the attacker may conduct activities within the scope of the victim's session, which could have serious implications for the security of the affected systems.

References