VULNERABILITY INTELLIGENCE

CVE-2026-24324

CVSS score6.5 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-02-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker with user privileges to execute a specific query in AdminTools that could cause the Content Management Server (CMS) to crash, rendering the CMS partially or completely unavailable and resulting in the denial of service of the Content Management Server (CMS). Successful exploitation impacts system availability, while confidentiality and integrity remain unaffected.

Weakness classification

  • cna@sap.com: CWE-405
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references