CVE-2023-27896

In SAP BusinessObjects Business Intelligence Platform - version 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own CMS, leading to a high impact on availability.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sap:businessobjects_business_intelligence:420:*:*:*:*:*:*:*
cpe:2.3:a:sap:businessobjects_business_intelligence:430:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-03-14 06:15

Updated : 2024-02-28 19:51


NVD link : CVE-2023-27896

Mitre link : CVE-2023-27896

CVE.ORG link : CVE-2023-27896


JSON object : View

Products Affected

sap

  • businessobjects_business_intelligence
CWE
CWE-918

Server-Side Request Forgery (SSRF)