CVE-2026-0485: Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform
SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause the Content Management Server (CMS) to crash and automatically restart. By repeatedly submitting these requests, the attacker could induce a persistent service disruption, rendering the CMS completely unavailable. Successful exploitation results in a high impact on availability, while confidentiality and integrity remain unaffected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0485?
CVE-2026-0485 has a high severity rating due to its potential to disrupt services by causing the Content Management Server to crash.
How do I fix CVE-2026-0485?
To fix CVE-2026-0485, apply the latest security patches provided by SAP for BusinessObjects BI Platform.
Who is affected by CVE-2026-0485?
CVE-2026-0485 affects all users of SAP BusinessObjects BI Platform who are running unpatched versions.
What type of vulnerability is CVE-2026-0485?
CVE-2026-0485 is classified as a Denial of Service (DoS) vulnerability.
Can CVE-2026-0485 be exploited remotely?
Yes, CVE-2026-0485 can be exploited remotely by an unauthenticated attacker sending crafted requests.