CVEvulnerability

CVE-2026-66763

7.9 HIGH Published 2026-08-11 Modified 2026-10-24 Official page ↗
Status
Awaiting Analysis
Published
2026-08-11
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.9 HIGH — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Weaknesses
CWE-321

Description

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high privileges and local access to the server could retrieve these objects and decrypt the stored credentials. Successful exploitation could allow the attacker to obtain sensitive authentication data and modify protected information, resulting in a high impact on confidentiality and integrity. There is no impact on availability.

Related

Weakness · CWE (1)

  • CWE-321 Use of Hard-coded Cryptographic Key weakness

References