CVE-2023-27896: SAP Businessobjects Business Intelligence

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In SAP BusinessObjects Business Intelligence Platform - version 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own CMS, leading to a high impact on availability.

Affected products

• SAP Businessobjects Business Intelligence: version 420 only; version 430 only

Published 2023-03-14. Last modified 2026-06-17.