SAP BusinessObjects Business Intelligence
Platform allows an authenticated attacker to upload malicious code over the
network, that could be executed by the application. On successful exploitation,
the attacker can cause a low impact on the Integrity of the application.
References
| Link | Resource |
|---|---|
| https://me.sap.com/notes/3433545 | Permissions Required |
| https://me.sap.com/notes/3515653 | |
| https://url.sap/sapsecuritypatchday | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
10 Dec 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
12 Sep 2024, 13:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://me.sap.com/notes/3433545 - Permissions Required | |
| References | () https://url.sap/sapsecuritypatchday - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| CPE | cpe:2.3:a:sap:business_objects_business_intelligence_platform:430:*:*:*:*:*:*:* cpe:2.3:a:sap:business_objects_business_intelligence_platform:420:*:*:*:*:*:*:* cpe:2.3:a:sap:business_objects_business_intelligence_platform:440:*:*:*:*:*:*:* |
|
| CWE | CWE-434 | |
| First Time |
Sap
Sap business Objects Business Intelligence Platform |
13 Aug 2024, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-13 04:15
Updated : 2024-12-10 07:15
NVD link : CVE-2024-42375
Mitre link : CVE-2024-42375
JSON object : View
Products Affected
sap
- business_objects_business_intelligence_platform
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type