Fiche vulnérabilité
CVE-2023-25616 : faille critique SAP Business Objects Business… (CVSS 9.9)
Description
In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
En bref
- Sévérité
- Critique (CVSS 9.9)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 14 mars 2023
- Dernière mise à jour
- 27 févr. 2025
Produits concernés
- SAP Business Objects Business Intelligence Platform (CMC)