In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
References
Link | Resource |
---|---|
https://launchpad.support.sap.com/#/notes/3245526 | Permissions Required |
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2023-03-14 05:15
Updated : 2024-02-28 19:51
NVD link : CVE-2023-25616
Mitre link : CVE-2023-25616
CVE.ORG link : CVE-2023-25616
JSON object : View
Products Affected
sap
- business_objects_business_intelligence_platform
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')