MEDIUM 4.3 NVD

CVE-2026-66772

SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on certain administrative functionality. An at

SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on certain administrative functionality. An attacker authenticated as a non-administrative user could bypass this restriction to gain limited information about affected functionality. This results in a low impact on confidentiality. There is no impact on integrity and availability.

References

https://me.sap.com/notes/3770649
https://url.sap/sapsecuritypatchday

Published: 2026-08-11 · Source: NVD · Feed updated: 2026-08-11

This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-08-11 via NVD.

vulnfeed aggregates 7836 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.