CVE-2026-58248

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (affected versions not specified)

Description An XML External Entity (XXE) Injection exists in the Web Intelligence component. This issue allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external references. When the system processes this file as a data source, it resolves the references, which can expose the contents of sensitive server-side files within the generated report, leading to a high impact on confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.