CVE-2026-44755
Last modified
CVE-2026-44755 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters supplied by authenticated users, resulting in an email spoofing vulnerability.This vulnerability has a low impact on integrity and does not affect the confidentiality and availability of the application.. EPSS estimates a 0.11% chance of exploitation in the next 30 days.
Description
SAP Business Objects Business Intelligence Platform does not sufficiently validate email sending parameters supplied by authenticated users, resulting in an email spoofing vulnerability.This vulnerability has a low impact on integrity and does not affect the confidentiality and availability of the application.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| SAP_SE | SAP Business Objects Business Intelligence Platform | ENTERPRISE 430; 2025; 2027 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-44755?
How severe is CVE-2026-44755?
How do I fix CVE-2026-44755?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-4475A vulnerability has been found in Yi Technology YI Home Came…8.8
- CVE-2026-44750SAP MDG (Review Match Groups Application) does not perform t…4.3
- CVE-2026-44751Application server ABAP does not perform necessary authoriza…7.1
- CVE-2026-44752SAP NetWeaver Application Server Java allows an unauthentica…8.2
- CVE-2026-44753SAP HANA Database (user self service tools) allows an unauth…3.7
- CVE-2026-44754The Remote Function Call (RFC) modules of the Operational Da…6.6
- CVE-2026-44757SAP Wily Introscope Enterprise Manager allows an unauthentic…4.7
- CVE-2026-44758SAP Manufacturing Integration and Intelligence (MII) allows …9.1
- CVE-2026-44759SAP NetWeaver Enterprise Portal allows an unauthenticated at…6.1
- CVE-2026-4476A vulnerability was found in Yi Technology YI Home Camera 2 …6.3
- CVE-2026-44760Due to a Cross-Site Scripting (XSS) vulnerability, applicati…4.7
- CVE-2026-44761SAP Commerce Cloud could retain a sample OAuth2 client with …9.1
Are you affected by CVE-2026-44755?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST