CVE-2023-36923CWE-94

Code Injection vulnerability in SAP PowerDesigner

High · published August 8, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library, that can be executed by the application. An attacker could thereby control the behavior of the application.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.7th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2023-08-08T00:36Z
EPSS history
Timeline
  • 08 AUG 00:36Z
    Code Injection vulnerability in SAP PowerDesigner
    cvelistv5