CVE-2026-0485

HIGH

SAP BusinessObjects BI Platform - DoS

Title source: llm

Description

SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause the Content Management Server (CMS) to crash and automatically restart. By repeatedly submitting these requests, the attacker could induce a persistent service disruption, rendering the CMS completely unavailable. Successful exploitation results in a high impact on availability, while confidentiality and integrity remain unaffected.

Scores

CVSS v3 7.5
EPSS 0.0006
EPSS Percentile 17.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-405
Status published

Affected Products (3)

sap/businessobjects_business_intelligence_platform
sap/businessobjects_business_intelligence_platform
sap/businessobjects_business_intelligence_platform

Timeline

Published Feb 10, 2026
Tracked Since Feb 18, 2026