critical2026-11-10SAP BusinessObjects Business Intelligence Platform (Web Intelligence)CVE-2026-109798

XML External Entity (XXE) in SAP BusinessObjects BI Platform (Web Intelligence)

SAP BusinessObjects Business Intelligence Platform (Web Intelligence)

Vulnerability Detail

SAP lists this as a critical issue (CVSS 9.1) affecting SAP BusinessObjects Business Intelligence Platform (Web Intelligence). Affected versions and fix details are in the official note.

Patch Action

Review SAP Note 3799117 and apply the fix it describes. Our editorial recommendation: treat as urgent and verify against the official note before acting.

Patch Info

Priority

🔴 Patch immediately

CVSS Score

9.1

SAP Note

3799117 ↗

CVE

CVE-2026-109798

Published

2026-11-10

← All patches