CVE-2026-24324

MEDIUM

6.5

Description

SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker with user privileges to execute a specific query in AdminTools that could cause the Content Management Server (CMS) to crash, rendering the CMS partially or completely unavailable and resulting in the denial of service of the Content Management Server (CMS). Successful exploitation impacts system availability, while confidentiality and integrity remain unaffected.

CVE Details

CVSS v3.1 Score6.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published2/10/2026

Last Modified2/17/2026

Sourcenvd

Honeypot Sightings0

Affected Products

sap:businessobjects_business_intelligence_platform

Weaknesses (CWE)

CWE-405

References

https://me.sap.com/notes/3695912(cna@sap.com)

https://url.sap/sapsecuritypatchday(cna@sap.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.