CVE-2025-0061: Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
First published: Tue Jan 14 2025(Updated: )
SAP BusinessObjects Business Intelligence Platform allows an unauthenticated attacker to perform session hijacking over the network without any user interaction, due to an information disclosure vulnerability. Attacker can access and modify all the data of the application.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP BusinessObjects Business Intelligence Platform |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-0061?
CVE-2025-0061 has a critical severity rating due to the potential for session hijacking and unauthorized access to sensitive data.
How do I fix CVE-2025-0061?
To fix CVE-2025-0061, ensure that you apply the latest security patches provided by SAP for the BusinessObjects Business Intelligence Platform.
What types of attacks are possible due to CVE-2025-0061?
CVE-2025-0061 allows unauthenticated attackers to perform session hijacking and gain unauthorized access to application data.
Who is affected by CVE-2025-0061?
Any organization using SAP BusinessObjects Business Intelligence Platform is at risk of being affected by CVE-2025-0061.
Is user interaction required to exploit CVE-2025-0061?
No, CVE-2025-0061 can be exploited without any user interaction, making it particularly dangerous.
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/severity
- agent/author
- agent/weakness
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/source
- agent/epss
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap businessobjects business intelligence platform