CVE-2023-37489CWE-209

Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)

Medium · published September 12, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
43.6
In the wild
Unconfirmed
What it is

Due to the lack of validation, SAP BusinessObjects Business Intelligence Platform (Version Management System) - version 403, permits an unauthenticated user to read the code snippet through the UI, which leads to low impact on confidentiality and no impact on the application's availability or integrity.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00524 · 43.6th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2023-09-12T00:55Z
EPSS history
Timeline
  • 12 SEP 00:55Z
    Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)
    cvelistv5