CVE-2026-24324
Denial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)
- State
- Published
- Severity
- 6.5 Medium
- Published
- Feb 10, 2026
- Updated
- Feb 10, 2026
- Reserved
- Jan 21, 2026
Description
SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker with user privileges to execute a specific query in AdminTools that could cause the Content Management Server (CMS) to crash, rendering the CMS partially or completely unavailable and resulting in the denial of service of the Content Management Server (CMS). Successful exploitation impacts system availability, while confidentiality and integrity remain unaffected.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | sap |
Weaknesses
- CWE-405 Asymmetric Resource Consumption
Affected Products
| Product | Versions |
|---|---|
SAP BusinessObjects Business Intelligence Platform (AdminTools)SAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.