Vulnerability · Published Mar 14, 2023 · Assigned by sap
CVE-2023-25616Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)
Critical 9.9
In plain English
A critical-severity injection in Business Objects Business Intelligence Platform (CMC) from SAP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).
Official description
In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP | Business Objects Business Intelligence Platform (CMC) | 420430 |
Weakness: CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H