In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
References
Link | Resource |
---|---|
https://launchpad.support.sap.com/#/notes/3245526 | Permissions Required |
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
https://launchpad.support.sap.com/#/notes/3245526 | Permissions Required |
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:49
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.9 |
References | () https://launchpad.support.sap.com/#/notes/3245526 - Permissions Required | |
References | () https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory |
Information
Published : 2023-03-14 05:15
Updated : 2024-11-21 07:49
NVD link : CVE-2023-25616
Mitre link : CVE-2023-25616
CVE.ORG link : CVE-2023-25616
JSON object : View
Products Affected
sap
- business_objects_business_intelligence_platform
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')