CVE-2026-0508: Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform
The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application. Upon successful exploitation, the victim may click on this malicious URL, resulting in an unvalidated redirect to the attacker-controlled domain and subsequently download the malicious content. This vulnerability has a high impact on the confidentiality and integrity of the application, with no effect on the availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0508?
CVE-2026-0508 is classified as a high severity vulnerability, allowing authenticated attackers to exploit it.
How do I fix CVE-2026-0508?
To fix CVE-2026-0508, apply the latest security patches provided by SAP for the BusinessObjects Business Intelligence Platform.
What is an Open Redirect vulnerability in CVE-2026-0508?
An Open Redirect vulnerability, such as in CVE-2026-0508, allows attackers to redirect users to malicious URLs, potentially leading to phishing or malware distribution.
Who can exploit CVE-2026-0508?
CVE-2026-0508 can be exploited by authenticated users with high privileges within the SAP BusinessObjects Business Intelligence Platform.
What impact does CVE-2026-0508 have on users?
The impact of CVE-2026-0508 includes exposing users to phishing attacks or directing them to harmful websites upon clicking malicious links.