Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-37483

Improper Access Control Vulnerabilities in SAP PowerDesigner

Description

SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to run arbitrary queries against the back-end database via Proxy.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP PowerDesigner

Default version status: unaffected

  • 16.7affected

References