Denial of Service Vulnerability in SAP BusinessObjects Business Intelligence Platform
CVE-2026-24324

6.5MEDIUM

Key Information:

Vendor

SAP
Status
SAP Businessobjects Business Intelligence Platform (admintools)
Vendor
CVE Published:
10 February 2026

What is CVE-2026-24324?

The SAP BusinessObjects Business Intelligence Platform (specifically AdminTools) is vulnerable to a denial of service attack. An authenticated user with sufficient privileges can execute a specific query that may lead to the Content Management Server (CMS) crashing. This disruption can render the CMS partially or entirely unavailable, significantly affecting system availability. However, the confidentiality and integrity of the system are not compromised. Administrators should take necessary precautions to mitigate this risk, ensuring continuous service availability.

Affected Version(s)

SAP BusinessObjects Business Intelligence Platform (AdminTools) ENTERPRISE 430

SAP BusinessObjects Business Intelligence Platform (AdminTools) 2025

SAP BusinessObjects Business Intelligence Platform (AdminTools) 2027

References

https://me.sap.com/notes/3695912
https://url.sap/sapsecuritypatchday

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.