CVE-2024-32732

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-32732
Under certain conditions SAP BusinessObjects Business Intelligence platform allows an attacker to access information which would otherwise be restricted.This has low impact on Confidentiality with no impact on Integrity and Availability of the application.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://me.sap.com/notes/3524933 Permissions Required
https://url.sap/sapsecuritypatchday Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:enterprise:*:*:*
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:-:*:*:*
History

28 Oct 2025, 18:29

Type Values Removed Values Added
CPE cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:enterprise:*:*:*
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:2025:*:*:*:-:*:*:*
Summary
  • (es) Bajo ciertas condiciones, la plataforma SAP BusinessObjects Business Intelligence permite a un atacante acceder a información que de otro modo estaría restringida. Esto tiene un impacto bajo en la confidencialidad y ningún impacto en la integridad y disponibilidad de la aplicación.
First Time Sap
Sap businessobjects Business Intelligence Platform
References () https://me.sap.com/notes/3524933 - () https://me.sap.com/notes/3524933 - Permissions Required
References () https://url.sap/sapsecuritypatchday - () https://url.sap/sapsecuritypatchday - Patch

10 Dec 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-10 01:15

Updated : 2025-10-28 18:29

NVD link : CVE-2024-32732

Mitre link : CVE-2024-32732

CVE.ORG link : CVE-2024-32732

JSON object : View

Products Affected

sap

  • businessobjects_business_intelligence_platform
CWE
CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere