CVE-2023-24530CWE-434

SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed…

High · published February 14, 2023

CVSS v3.1
8.4
EPSS
1%
Percentile
45.6
In the wild
Unconfirmed
What it is

SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network. On successful exploitation, attacker can perform operations that may completely compromise the application causing high impact on confidentiality, integrity and availability of the application.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00555 · 45.6th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2023-02-14T03:19Z
EPSS history
Timeline
  • 14 FEB 03:19Z
    SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed…
    cvelistv5