CVE-2025-0060: Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
First published: Tue Jan 14 2025(Updated: )
SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can read sensitive information from the server and send it to the attacker. The attacker could further use this information to impersonate as a high privileged user causing high impact on confidentiality and integrity of the application.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP BusinessObjects Business Intelligence Platform |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-0060?
CVE-2025-0060 is classified as a high severity vulnerability due to its potential for sensitive data exposure.
How do I fix CVE-2025-0060?
To fix CVE-2025-0060, apply the latest security patches provided by SAP for the BusinessObjects Business Intelligence Platform.
Who is affected by CVE-2025-0060?
CVE-2025-0060 affects users of SAP BusinessObjects Business Intelligence Platform who have authenticated access.
What type of attack is associated with CVE-2025-0060?
CVE-2025-0060 is associated with a cross-site scripting (XSS) attack that allows the injection of malicious JavaScript code.
What data can an attacker access through CVE-2025-0060?
An attacker exploiting CVE-2025-0060 can read sensitive information from the server, potentially leading to user impersonation.
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/severity
- agent/author
- agent/weakness
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap businessobjects business intelligence platform