In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/3245526 | Permissions Required |
| https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
11 Apr 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system. |
Information
Published : 2023-03-14 05:15
Updated : 2023-04-11 22:15
NVD link : CVE-2023-25616
Mitre link : CVE-2023-25616
JSON object : View
Products Affected
sap
- business_objects_business_intelligence_platform
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')