Vulnerability Report

CVE-2026-0508

Title: Sap Businessobjects Business Intelligence Platform

Other

Proof Of Concept

No public PoC currently indexed for CVE-2026-0508.

CWE Category CWE-601

Published Date Feb 10, 2026

Modified Date Feb 17, 2026

Exploit Status Not Found

Score 7.3 CVSS v3.1

Exploit Probability (EPSS)

0.01%

Vulnerability Summary

CVE-2026-0508: The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application. Upon successful exploitation, the victim may click on this malicious URL, resulting in an unvalidated redirect to the attacker-controlled domain and subsequently download the malicious content. This vulnerability has a high impact on the confidentiality and integrity of the application, with no effect on the availability of the application.

Impacted Vendors

sap 1

Reference Links

https://me.sap.com/notes/3674246 https://url.sap/sapsecuritypatchday

CVSS v3.1

Source Entity [email protected]

Severity HIGH

8.1

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

REQUIRED

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

CHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N