Improper Validation in SAP BusinessObject Business Intelligence Launch Pad Allows Unauthorized Access to Operating System Information

CVE-2024-25646

Due to improper validation, SAP BusinessObject Business Intelligence Launch Pad allows an authenticated attacker to access operating system information using crafted document. On successful exploitation there could be a considerable impact on confidentiality of the application.

Learn more about our Web Application Penetration Testing UK.