CVE-2024-37179: SAP Businessobjects Business Intelligence

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application.

Affected products

• SAP Businessobjects Business Intelligence: version 420 only; version 430 only; version 2025 only

Published 2024-10-08. Last modified 2026-06-17.