SAP BusinessObjects BI Platform contains a vulnerability that permits an unauthenticated attacker to craft a specific network request to a trusted endpoint, causing the authentication mechanism to fail and preventing legitimate users from accessing the system. The weakness is a missing authorization check, classified as CWE‑862. The result is a denial of available service, while confidentiality and integrity remain unaffected.

The affected products are SAP BusinessObjects BI Platform in its enterprise edition for versions 2025, 2027, and 430. No specific minor or patch levels are listed, implying that all releases of these major versions may be vulnerable.

The CVSS score of 7.5 categorizes this vulnerability as High. The EPSS score of less than 1% indicates that exploitation is currently unlikely. It is not listed in CISA's KEV catalog. The likely attack vector is from any network that can reach the trusted endpoint, as the vulnerability does not require authentication and can be triggered by a crafted request. A successful exploit would deny system availability and disrupt business operations.