SAP SE SAP Business Objects Business Intelligence Platform vulnerabilities

2 CVEs affecting SAP SE SAP Business Objects Business Intelligence Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-44755, published 2026-06-09.

More from SAP SE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-23185, published 2025-03-11. Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days. Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an…
• CVE-2026-44755, published 2026-06-09. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters supplied by authenticated users, resulting in an email spoofing vulnerability.This…