Skip links
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Potential information disclosure relating to BI-BIP-ADM, SAP security note 1998990

SAP Note 1998990

SAP security note 1998990, “Potential Information Disclosure in BI-BIP-ADM”, is a note. Below are the symptom and SAP recommended solution.

Description

Symptom

An attacker can discover information related to BI-BIP-ADM. This information could be used to specialize attacks against BI-BIP systems.

Solution

To remediate this issue, install one of the following SAP Support Packages or patches:

  • BI 4.0 Patch 9.1
  • BI 4.0 SP10
  • BI 4.1 SP04

Ensure that you apply the latest patches or support packs available to maintain security and functionality.

CVSS

Score 3.5 Vector: AV:N/AC:M/AU:S/C:P/I:N/A:N

Full note on SAP: SAP Support Launchpad note 1998990

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

Explore More

SAP Security Patch Day November 2026 — RedRays

SAP Security Patch Day November 2026

SAP’s November 2026 Patch Day brings 38 notes, nine HotNews and four CVSS 10.0 issues in SAML2, SAP Gateway, Web Dispatcher and ICM. What to patch first.