CVE-2026-44743: Security Misconfiguration vulnerability in SAP Business Objects
Under certain conditions, when an unauthorized attacker accesses a specific endpoint, SAP Business Objects application leaks sensitive information .This has a low impact on the confidentiality of the data. There is no impact on integrity and availability of the application.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Require authentication and authorization for the affected endpoint; disable the endpoint if it is not required, and apply least-privilege access controls.
SAP Business Objects specific_endpoint_access = require authentication and restrict access to authorized users - Compensating control
Restrict access to the affected endpoint at the network perimeter (firewall/ACL/WAF) to trusted IPs or internal networks to prevent unauthorized external access.
- Operational
Review logs for any access to the affected endpoint, investigate potential sensitive-data exposure, and follow incident-response procedures to contain and remediate any confirmed leaks.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44743?
The severity of CVE-2026-44743 is classified as low, with a score of 3.7.
What does CVE-2026-44743 affect?
CVE-2026-44743 affects the SAP Business Objects application, leading to potential information leakage.
How can I mitigate the risk associated with CVE-2026-44743?
Mitigation for CVE-2026-44743 involves ensuring proper configuration and access controls for sensitive endpoints in SAP Business Objects.
What kind of information is leaked by CVE-2026-44743?
CVE-2026-44743 may lead to the leakage of sensitive information under certain conditions when accessed by an unauthorized attacker.
Is there an integrity or availability impact from CVE-2026-44743?
There is no impact on integrity or availability from CVE-2026-44743; it only affects the confidentiality of the data.