CVE-2010-3980: Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested...

Security readout for executives and security teams

This is an authenticated denial-of-service issue in SAP BusinessObjects Enterprise XI 3.2. A logged-in remote user could request an excessive number of CUIDs from a BusinessObjects SOAP service and potentially exhaust service resources. The available sources do not provide CVSS, patch details, or evidence of active exploitation. Exposure is most likely where SAP BusinessObjects Enterprise XI 3.2 is still deployed and the dswsbobje biplatform SOAP service is reachable by authenticated users. Public exposure increases operational risk, but the bundle does not confirm default exposure or other affected versions. Treat this as a legacy enterprise application availability risk. It requires attention if SAP BusinessObjects XI 3.2 remains in use, especially where many users can authenticate or the service is internet-reachable. Business urgency depends on service criticality and whether vendor-supported fixes or upgrades are available. Mitigation focus: Check SAP vendor guidance and support status for BusinessObjects Enterprise XI 3.2.; Limit access to BusinessObjects SOAP services to trusted users and networks.; Review whether the dswsbobje biplatform service is required in production..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.