CVE-2025-31332 MEDIUM

CVE-2025-31332: Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform

Vendor Sap_Se
Product SAP BusinessObjects Business Intelligence Platform
Weakness CWE-277
Published April 8, 2025
Last update April 8, 2025
View on NVD All CVEs

CVSS base score

6.6/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

What the vulnerability does

01Description

Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this vulnerability does not disclose any sensitive data.

Key dates

02Disclosure timeline

April 8, 2025 CVE published
April 8, 2025 Record updated