Security Misconfiguration vulnerability in SAP Business Objects
CVE-2026-44743

3.7LOW

Key Information:

Vendor

SAP
Status
SAP Business Objects
Vendor
CVE Published:
9 June 2026

What is CVE-2026-44743?

Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a low impact on the confidentiality of the data. There is no impact on integrity and availability of the application.

Affected Version(s)

SAP Business Objects ENTERPRISE 430

SAP Business Objects 2025

SAP Business Objects 2027

References

https://me.sap.com/notes/3706000
https://url.sap/sapsecuritypatchday

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.