CVE-2025-23185mediumCWE-209

CVE-2025-23185: medium-severity vulnerability in SAP_SE SAP Business Objects Business…

Information Disclosure in SAP Business Objects Business Intelligence Platform

Published

Follow this CVE+ Monitor SAP BusinessObjects Business Intelligence Platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.1epss 0.3%
Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they could use it to craft further exploits. There is no impact on the integrity and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Affected products
SAP_SE · SAP Business Objects Business Intelligence Platform
Related CVEs — SAP_SE SAP Business Objects Business…

In the same product, most dangerous first.

CVE-2025-42988LOWServer-Side Request Forgery in SAP Business Objects Business Intelligence PlatformEPSS 0.3%CVE-2026-44755MEDIUMEmail Spoofing vulnerability in SAP Business Objects Business Intelligence PlatformEPSS 0.1%