CVE-2026-66772 PUBLISHED

Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools)

Assigner: sap
Reserved: 27.07.2026 Published: 11.08.2026 Updated: 11.08.2026

SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on certain administrative functionality. An attacker authenticated as a non-administrative user could bypass this restriction to gain limited information about affected functionality. This results in a low impact on confidentiality. There is no impact on integrity and availability.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS Score: 4.3

Product Status

Vendor SAP_SE
Product SAP BusinessObjects Business Intelligence Platform (Admin Tools)
Versions Default: unaffected
  • Version ENTERPRISE 430 is affected
  • Version 2025 is affected

References

Problem Types