TROYANOSYVIRUS
Voltar para CVEs

CVE-2026-0508

HIGH
7.3

Descricao

The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within the application. Upon successful exploitation, the victim may click on this malicious URL, resulting in an unvalidated redirect to the attacker-controlled domain and subsequently download the malicious content. This vulnerability has a high impact on the confidentiality and integrity of the application, with no effect on the availability of the application.

Detalhes CVE

Pontuacao CVSS v3.17.3
SeveridadeHIGH
Vetor CVSSCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
Vetor de ataqueNETWORK
ComplexidadeHIGH
Privilegios necessariosHIGH
Interacao do usuarioREQUIRED
Publicado2/10/2026
Ultima modificacao2/17/2026
Fontenvd
Avistamentos honeypot0

Produtos afetados

sap:businessobjects_business_intelligence_platform

Fraquezas (CWE)

CWE-601

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.