CVE-2025-31332
Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.6EPSS 0.1%KEV nãoPoC —Patch —
Lifecycle
08 Apr 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this vulnerability does not disclose any sensitive data.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Affected products
SAP_SE · SAP BusinessObjects Business Intelligence PlatformWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →