CVE-2025-0061

CVSS 3.1 Score 8.7 of 10 (high)

Details

Published Jan 14, 2025
CWE ID 497

Summary

CVE-2025-0061 is a newly disclosed vulnerability affecting SAP BusinessObjects Business Intelligence Platform. This issue permits unauthenticated attackers to execute session hijacking over the network without user intervention. The root cause is an information disclosure vulnerability. As a consequence, adversaries can potentially access and manipulate all data within the application.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share