CVE-2023-31404: SAP Businessobjects Business Intelligence

Medium severity, CVSS 5.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Under certain conditions, SAP BusinessObjects Business Intelligence Platform (Central Management Service) - versions 420, 430, allows an attacker to access information which would otherwise be restricted. Some users with specific privileges could have access to credentials of other users. It could let them access data sources which would otherwise be restricted.

Affected products

• SAP Businessobjects Business Intelligence: version 420 only; version 430 only

Published 2023-05-09. Last modified 2026-06-17.