CVE-2026-66772

Summary

SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on certain administrative functionality. An attacker authenticated as a non-administrative user could bypass this restriction to gain limited information about affected functionality. This results in a low impact on confidentiality. There is no impact on integrity and availability.

Affected Software

Weaknesses

• CWE-862: CWE-862: Missing Authorization

References

• https://me.sap.com/notes/3770649
• https://url.sap/sapsecuritypatchday

• ←Previous
• Next→