CVE-2025-0061: Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0061?
CVE-2025-0061 has a critical severity rating due to the potential for session hijacking and unauthorized access to sensitive data.
How do I fix CVE-2025-0061?
To fix CVE-2025-0061, ensure that you apply the latest security patches provided by SAP for the BusinessObjects Business Intelligence Platform.
What types of attacks are possible due to CVE-2025-0061?
CVE-2025-0061 allows unauthenticated attackers to perform session hijacking and gain unauthorized access to application data.
Who is affected by CVE-2025-0061?
Any organization using SAP BusinessObjects Business Intelligence Platform is at risk of being affected by CVE-2025-0061.
Is user interaction required to exploit CVE-2025-0061?
No, CVE-2025-0061 can be exploited without any user interaction, making it particularly dangerous.