CVE-2026-24324

CVE Database · CVE-2026-24324

CVE-2026-24324

· MEDIUMAnalyzed

CVSS v3.1

6.5

EPSS

0.34%

Published

Feb 10, 2026

Modified

Feb 17, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SAP BusinessObjects Business Intelligence Platform (AdminTools) allows an authenticated attacker with user privileges to execute a specific query in AdminTools that could cause the Content Management Server (CMS) to crash, rendering the CMS partially or completely unavailable and resulting in the denial of service of the Content Management Server (CMS). Successful exploitation impacts system availability, while confidentiality and integrity remain unaffected.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-405

Affected Products (3)

sap · businessobjects_business_intelligence_platformvulnerable

References (2)

https://me.sap.com/notes/3695912

Permissions Required

https://url.sap/sapsecuritypatchday

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs