CVE-2025-0060: Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can read sensitive information from the server and send it to the attacker. The attacker could further use this information to impersonate as a high privileged user causing high impact on confidentiality and integrity of the application.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0060?
CVE-2025-0060 is classified as a high severity vulnerability due to its potential for sensitive data exposure.
How do I fix CVE-2025-0060?
To fix CVE-2025-0060, apply the latest security patches provided by SAP for the BusinessObjects Business Intelligence Platform.
Who is affected by CVE-2025-0060?
CVE-2025-0060 affects users of SAP BusinessObjects Business Intelligence Platform who have authenticated access.
What type of attack is associated with CVE-2025-0060?
CVE-2025-0060 is associated with a cross-site scripting (XSS) attack that allows the injection of malicious JavaScript code.
What data can an attacker access through CVE-2025-0060?
An attacker exploiting CVE-2025-0060 can read sensitive information from the server, potentially leading to user impersonation.