Sap Powerdesigner (Sap Se) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-08-08. Vendor: Sap Se.

CVEs of Sap Powerdesigner

• CVE-2023-37483 - CVSS 9.8 (critical), 2023-08-08: SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to run arbitrary queries against the back-end…
• CVE-2023-37484 - CVSS 5.3 (medium), 2023-08-08: SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user provided one during login attempt, which…
• CVE-2023-36923 - CVSS 7.8 (high), 2023-08-08: SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library,…