CVE-2025-23185 — MEDIUM (4.1)

Vulnerability Description

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they could use it to craft further exploits. There is no impact on the integrity and availability of the application.

CVSS Score

4.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Related Weaknesses (CWE)

CWE-209

References

FAQ

What is CVE-2025-23185?

CVE-2025-23185 is a vulnerability with a CVSS score of 4.1 (MEDIUM). Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an a...

How severe is CVE-2025-23185?

CVE-2025-23185 has been rated MEDIUM with a CVSS base score of 4.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-23185?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.