CVE-2025-42988

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no impact on integrity and availability of the application.

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://me.sap.com/notes/3585545	Permissions Required
https://url.sap/sapsecuritypatchday	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430::::enterprise:::
	cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025::::enterprise:::
	cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2027::::enterprise:::

History

No history.

Information

Published : 2025-06-10 01:15

Updated : 2025-10-23 14:26

NVD link : CVE-2025-42988

Mitre link : CVE-2025-42988

CVE.ORG link : CVE-2025-42988

JSON object : View

Products Affected

sap

businessobjects_business_intelligence_platform

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2025-42988", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2025-06-10T01:15:22.023", "references": [{"url": "https://me.sap.com/notes/3585545", "tags": ["Permissions Required"], "source": "[email protected]"}, {"url": "https://url.sap/sapsecuritypatchday", "tags": ["Patch"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no impact on integrity and availability of the application."}, {"lang": "es", "value": "En determinadas circunstancias, SAP Business Objects Business Intelligence Platform permite a un atacante no autenticado enumerar endpoints HTTP en la red interna mediante la manipulaci\u00f3n de solicitudes HTTP espec\u00edficas. Esta divulgaci\u00f3n de informaci\u00f3n podr\u00eda permitir al investigador provocar SSRF. No afecta la integridad ni la disponibilidad de la aplicaci\u00f3n."}], "lastModified": "2025-10-23T14:26:31.777", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "8354981E-4A5F-4E5E-AF3A-283D5922DF90"}, {"criteria": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "CEEB4426-D0A6-40D4-B053-8A47E8E0700D"}, {"criteria": "cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2027:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "C532D05D-B06C-4BAB-84D1-5127F3A78977"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}