CVE-2024-32732

Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform

CVSS 5.3 MEDIUMEPSS 0.3%CWE-497

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 dez 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Under certain conditions SAP BusinessObjects Business Intelligence platform allows an attacker to access information which would otherwise be restricted.This has low impact on Confidentiality with no impact on Integrity and Availability of the application.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Produtos afetados

SAP_SE · SAP BusinessObjects Business Intelligence platform

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://me.sap.com/notes/3524933 https://url.sap/sapsecuritypatchday