SAP BusinessObjects BI Platform exposes a Content Management Server component that can be targeted by an unauthenticated attacker through specially crafted requests. These requests trigger a crash, causing the server to automatically restart. When the attacker repeats the attack, the CMS can be forced into a repeated crash‑restart loop, leading to a persistent outage. The vulnerability has a high impact on availability, while confidentiality and integrity remain unaffected.

The affected product is SAP BusinessObjects BI Platform. Version information inferred from the listed CPE entries indicates the vulnerability exists in the 2025, 2027, and 430 Enterprise editions of the platform. No other versions are explicitly identified as affected.

The CVSS score of 7.5 classifies this defect as high severity, and the EPSS score of less than 1% suggests a low probability of exploitation at present. The vulnerability is not part of the CISA known exploited vulnerabilities catalog. Attackers can exploit the flaw remotely with no authentication, from any network able to reach the CMS endpoints. Successful exploitation results in denial of service and prolonged unavailability of the platform.