CVE-2026-0502: falha de média gravidade em SAP_SE SAP BusinessObjects Business…
Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.1%
Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send unintended requests to the web server. This has low impact on integrity and availability of the application. There is no impact on confidentiality of the data.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Produtos afetados
SAP_SE · SAP BusinessObjects Business Intelligence PlatformCVEs relacionadas — SAP_SE SAP BusinessObjects Business…
No mesmo produto, das mais perigosas para as menos.
CVE-2024-41730CRITICALMissing Authentication check in SAP BusinessObjects Business Intelligence PlatformEPSS 75.9%CVE-2023-36917MEDIUMPassword Change rate limit bypass in SAP BusinessObjects Business Intelligence PlatformEPSS 0.6%CVE-2024-28165HIGHCross site scripting vulnerability in SAP BusinessObjects Business Intelligence PlatformEPSS 0.6%CVE-2023-0020HIGHCVE-2023-0020EPSS 0.5%CVE-2025-0061HIGHMultiple vulnerabilities in SAP BusinessObjects Business Intelligence PlatformEPSS 0.5%CVE-2023-30740MEDIUMInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence PlatformEPSS 0.5%