CVE-2025-25245
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Mar 11, 2025
CWE ID 79
Summary
CVE-2025-25245 is a vulnerability affecting SAP BusinessObjects Business Intelligence Platform's Web Intelligence component. This issue involves a deprecated web application endpoint that lacks adequate security measures. An attacker can manipulate data by injecting malicious URLs, leading to potential confidentiality and integrity breaches confined to the victim's browser. No impact on system availability is reported.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SAP BusinessObjects Business Intelligence Platform
Affected Vendors
- SAP SE