CVE-2025-42988: SSRF in SAP Business Objects Business Intelligence Platform

The primary impact of CVE-2025-42988 lies in the exposure of internal HTTP endpoints. An attacker can leverage this information to map the internal network architecture and identify potential targets for further attacks. While the vulnerability itself doesn't allow direct data exfiltration or modification, successful endpoint enumeration can be a stepping stone to SSRF attacks, potentially allowing access to internal services and resources that should be inaccessible from the outside. This could include accessing sensitive configuration files, internal APIs, or even other internal systems, depending on the services exposed on those endpoints. The lack of authentication required for this enumeration significantly broadens the attack surface.

1. Reserved2025-04-16
2. Published2025-06-10
3. EPSS updated2026-03-23

The recommended mitigation for CVE-2025-42988 is to immediately upgrade to SAP Business Objects Business Intelligence Platform version 430.0.1 or later. If upgrading is not immediately feasible, consider implementing network segmentation to restrict access to internal services from the affected platform. Web Application Firewalls (WAFs) configured to detect and block suspicious HTTP requests targeting internal endpoints can provide an additional layer of defense. Monitor HTTP access logs for unusual patterns or requests originating from the platform that could indicate exploitation attempts. After upgrading, confirm the vulnerability is resolved by attempting to enumerate endpoints and verifying that the requests are blocked or return an error.