CVE-2025-0062
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Mar 11, 2025
CWE ID 79
Summary
CVE-2025-0062 is a vulnerability affecting SAP BusinessObjects Business Intelligence Platform. An attacker can inject JavaScript code into Web Intelligence reports, which is then executed in the victim's browser each time the page is visited. This could lead to limited impact on confidentiality and integrity within the browser's context, but there is no effect on availability. This vulnerability is only exploitable if script/html execution is enabled by the administrator in the Central Management Console.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SAP BusinessObjects Business Intelligence Platform
Affected Vendors
- SAP SE