CVE-2023-37489
Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 5.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 set 2023Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Due to the lack of validation, SAP BusinessObjects Business Intelligence Platform (Version Management System) - version 403, permits an unauthenticated user to read the code snippet through the UI, which leads to low impact on confidentiality and no impact on the application's availability or integrity.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
SAP_SE · SAP BusinessObjects Business Intelligence Platform (Version Management System)Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →