CVE-2025-25245: SAP Businessobjects Business Intelligence Platform

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

SAP BusinessObjects Business Intelligence Platform (Web Intelligence) contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a limited impact on confidentiality and integrity within the scope of victim�s browser. There is no impact on availability.

Affected products

• SAP Businessobjects Business Intelligence Platform: version 430 only; version 2025 only

Published 2025-03-11. Last modified 2026-06-17.