CVE-2023-25616
Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 9.9EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
14 mar 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Productos afectados
SAP · Business Objects Business Intelligence Platform (CMC)¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →