GHSA-pqj4-h6r8-qxjh

GHSA-pqj4-h6r8-qxjh PUBLISHED CVSS 4.199999809265137 MEDIUM

Record from GitHub Advisory Database · Published April 14, 2026

Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session tokens and reuse them to gain unauthorized access to a victim�s session. If the application continues to accept previously issued tokens after authentication, the attacker could assume the victim�s authenticated context. This could allow the attacker to access or modify information within the victim�s session scope, impacting confidentiality and integrity, while availability remains unaffected.

Risk scores

CVSS 3.1

4.199999809265137

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Timeline

Apr 14, 2026 CVE Published
May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-pqj4-h6r8-qxjh
vulnetix vdb fixes GHSA-pqj4-h6r8-qxjh

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-pqj4-h6r8-qxjh/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →