Sensitive Credential Exposure in SAP BusinessObjects Business Intelligence Platform

CVE-2026-66763

What is CVE-2026-66763?

The SAP BusinessObjects Business Intelligence Platform contains a significant vulnerability where sensitive user credentials are stored using a hard-coded cryptographic key. This flaw exposes the credentials to attackers who have high privileges and local access to the server, allowing them to retrieve and decrypt the stored data. Such exploitation could lead to unauthorized access to authentication information and the capability to alter protected data, severely compromising confidentiality and integrity. It is crucial for organizations using this platform to address this vulnerability promptly to safeguard sensitive information.

References