SAP Note 3598118
Server Side Request Forgery(SSRF) vulnerability in SAP BusinessObjects BI Platform Central Management Console Promotion Management Application
MediumCVSS 4.1SAP BusinessObjects BI Platform Central Management Console Promotion Management Application
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2025-42965
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Affected products and versions
- Product SAP BusinessObjects BI Platform Central Management Console Promotion Management Application
Versions: ENTERPRISE 430, 2025, 2027
Appears in
Patch Days listing this note, newest first.
- July 2025MediumCVSS 4.1