VULNERABILITY INTELLIGENCE

CVE-2026-0485

CVSS score7.5 HIGH
EPSS probability0.46%
CISA KEVNot currently listed
Published2026-02-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause the Content Management Server (CMS) to crash and automatically restart. By repeatedly submitting these requests, the attacker could induce a persistent service disruption, rendering the CMS completely unavailable. Successful exploitation results in a high impact on availability, while confidentiality and integrity remain unaffected.

Weakness classification

  • cna@sap.com: CWE-405
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references