medium2026-04-14SAP BusinessObjectsCVE-2026-24318

Insecure Session Management in SAP BusinessObjects BI Platform

SAP BusinessObjects Business Intelligence Platform

Our Take

Batch with the other BO notes this month.

Vulnerability Detail

Insecure session management vulnerability in the BusinessObjects BI Platform that could allow session-related attacks.

Patch Action

Apply SAP Note 3702191.

Affected Versions

ENTERPRISE 430
2025
2027

Patch Info

Timing

🟡 Next patch window

CVSS Score

4.2

SAP Note

3702191 ↗

CVE

CVE-2026-24318

Published

2026-04-14

Timing recommendations are editorial. Verify against official SAP Security Notes before acting on production systems.
← All patches