Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2023-25616

Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)

Description

In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP Business Objects Business Intelligence Platform (CMC)

Default version status: unaffected

  • 420affected
  • 430affected

References