CVE-2026-0502: medium-severity vulnerability in SAP_SE SAP BusinessObjects Business…
Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.4epss 0.1%
Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send unintended requests to the web server. This has low impact on integrity and availability of the application. There is no impact on confidentiality of the data.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Affected products
SAP_SE · SAP BusinessObjects Business Intelligence PlatformRelated CVEs — SAP_SE SAP BusinessObjects Business…
In the same product, most dangerous first.
CVE-2024-41730CRITICALMissing Authentication check in SAP BusinessObjects Business Intelligence PlatformEPSS 75.9%CVE-2023-36917MEDIUMPassword Change rate limit bypass in SAP BusinessObjects Business Intelligence PlatformEPSS 0.6%CVE-2024-28165HIGHCross site scripting vulnerability in SAP BusinessObjects Business Intelligence PlatformEPSS 0.6%CVE-2023-0020HIGHCVE-2023-0020EPSS 0.5%CVE-2025-0061HIGHMultiple vulnerabilities in SAP BusinessObjects Business Intelligence PlatformEPSS 0.5%CVE-2023-30740MEDIUMInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence PlatformEPSS 0.5%