CVE-2023-25616

In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.

Score

CVSS 3.1 9.9 Critical

Status

Modified - cna@sap.com

Published

2023-03-14

Last modified

2025-02-27

Weaknesses

CWE-74

Affected products

• Business Objects Business Intelligence Platform (Sap)
• Business Objects Business Intelligence Platform Cmc (Sap)

References

• https://launchpad.support.sap.com/#/notes/3245526
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html