CVE-2024-28166

SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cna@sap.com

Published

2024-08-13

Last modified

2024-12-10

Weaknesses

CWE-434

Affected products

• Business Objects Business Intelligence Platform (Sap)
• Sap Businessobjects Business Intelligence Platform (Sap Se)

References

• https://me.sap.com/notes/3433545
• https://me.sap.com/notes/3515653
• https://url.sap/sapsecuritypatchday