CVE-2025-23185: Information Disclosure in SAP Business Objects Business Intelligence Platform
Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they could use it to craft further exploits. There is no impact on the integrity and availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23185?
CVE-2025-23185 is classified as a high severity vulnerability due to the potential exposure of sensitive application details.
How do I fix CVE-2025-23185?
To fix CVE-2025-23185, it is recommended to apply the latest security patches provided by SAP for the Business Objects Business Intelligence Platform.
Who is affected by CVE-2025-23185?
Only users with administrator level access in SAP Business Objects Business Intelligence Platform are affected by CVE-2025-23185.
What type of information is disclosed by CVE-2025-23185?
CVE-2025-23185 can reveal technical details and stack traces of the application in error messages during improper error handling.
What versions of SAP Business Objects are vulnerable to CVE-2025-23185?
CVE-2025-23185 affects various versions of SAP Business Objects Business Intelligence Platform where improper error handling is present.