CVE-2023-25616
CVSS V2 None
CVSS V3 None
Description
In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
Overview
- CVE ID
- CVE-2023-25616
- Assigner
- cna@sap.com
- Vulnerability Status
- Modified
- Published Version
- 2023-03-14T05:15:29
- Last Modified Date
- 2023-04-11T22:15:08
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:sap:business_objects_business_intelligence_platform:420:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:a:sap:business_objects_business_intelligence_platform:430:*:*:*:*:*:*:* | 1 | OR |
References
| Reference URL | Reference Tags |
|---|---|
| https://launchpad.support.sap.com/#/notes/3245526 | Permissions Required |
| https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-25616 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25616 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-04-17 06:22:56 | Added to TrackCVE | |||
| 2023-04-17 06:22:58 | Weakness Enumeration | new |