CVE-2007-6254: SAP Business Objects

High severity, CVSS 9.3. EPSS: 6.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• SAP Business Objects: up to and including 6.5

Published 2008-03-20. Last modified 2026-06-16.