In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
References
Link | Resource |
---|---|
https://launchpad.support.sap.com/#/notes/3245526 | Permissions Required |
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
11 Apr 2023, 22:15
Type | Values Removed | Values Added |
---|---|---|
Summary | In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system. |
16 Mar 2023, 19:04
Type | Values Removed | Values Added |
---|---|---|
First Time |
Sap
Sap business Objects Business Intelligence Platform |
|
References | (MISC) https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory | |
References | (MISC) https://launchpad.support.sap.com/#/notes/3245526 - Permissions Required | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CPE | cpe:2.3:a:sap:business_objects_business_intelligence_platform:430:*:*:*:*:*:*:* cpe:2.3:a:sap:business_objects_business_intelligence_platform:420:*:*:*:*:*:*:* |
14 Mar 2023, 05:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-03-14 05:15
Updated : 2023-12-10 14:48
NVD link : CVE-2023-25616
Mitre link : CVE-2023-25616
CVE.ORG link : CVE-2023-25616
JSON object : View
Products Affected
sap
- business_objects_business_intelligence_platform
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')