CVE-2026-109798

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (affected versions not specified)

Description An issue exists in the processing of OLAP connection requests where external entity resolution is not properly restricted. This allows an authenticated attacker to perform an XML External Entity (XXE) attack, which is a technique that leverages poorly configured XML parsers to read local files or interact with internal networks. This could lead to the disclosure of sensitive files on the server and allow the attacker to reach internal systems that are not otherwise exposed.

Recommendations Apply the latest SAP patch.