HIGH
Denial of service (DOS) in SAP BusinessObjects BI Platform
Published Feb 10, 2026
7.5
HIGHCVSS 3.1
EPSS 0.38%
Description
SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network request to the trusted endpoint that breaks the authentication, which prevents the legitimate users from accessing the platform. As a result, it has a high impact on the availability but no impact on the confidentiality and integrity.
Affected products
-
- Version 2025StatusaffectedConstraints-
- Version 2027StatusaffectedConstraints-
- Version ENTERPRISE 430StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| SAP SE | SAP BusinessObjects BI Platform | unaffected |
|
OR
- 430
- 2025
- 2027
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://me.sap.com/notes/3654236 Permissions Required
- https://url.sap/sapsecuritypatchday Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://me.sap.com/notes/3654236 | Permissions Required | |
| https://url.sap/sapsecuritypatchday | Vendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner sap
Published Feb 10, 2026
Updated Feb 10, 2026
Reserved Dec 9, 2025
Link CVE-2026-0490
CISA Vulnrichment
Updated Feb 10, 2026