Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-27896

Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform

Description

In SAP BusinessObjects Business Intelligence Platform - version 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own CMS, leading to a high impact on availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP BusinessObjects Business Intelligence Platform (Web Services)

Default version status: unaffected

  • 420affected
  • 430affected

References