CVE-2025-42988
Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform
Vexday Risk Score
8Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 3.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
10 jun 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no impact on integrity and availability of the application.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
SAP_SE · SAP Business Objects Business Intelligence PlatformQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →