AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-42896

MEDIUM · CVSS 5.4 EPSS 0.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-12-09 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.4. It may be remotely exploitable.

CVE
CVE-2025-42896
Severity
MEDIUM
CVSS
5.4
EPSS
0.28%

Original NVD Description

SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrity, and no impact to availability.