Vulnerability · Published Sep 10, 2024 · Assigned by sap

CVE-2024-45281DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform

Medium 5.8

In plain English

A medium-severity security flaw in SAP BusinessObjects Business Intelligence Platform from SAP_SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 3.1)5.8Medium

Exploit odds (30 days)0.2%top 94.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The attacker needs to have local access to the vulnerable system to perform DLL related tasks. This could result in a high impact on confidentiality and integrity of the application.

Affected products (as reported)

Vendor	Product	Versions
SAP_SE	SAP BusinessObjects Business Intelligence Platform	430

Weakness: CWE-426 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

In plain English

Official description

Affected products (as reported)

References