High severity8.7NVD Advisory· Published Feb 11, 2025· Updated Jun 17, 2026
CVE-2025-0064
CVE-2025-0064
Description
Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:-:*:*:*+ 1 more
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:-:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:enterprise:*:*:*
- Range: ENTERPRISE 430
Patches
Vulnerability mechanics
References
2- url.sap/sapsecuritypatchdaynvdPatch
- me.sap.com/notes/3525794nvdPermissions Required
News mentions
0No linked articles in our index yet.