CVE-2024-28166CWE-434
Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
Low · published August 13, 2024
What it is
SAP BusinessObjects Business Intelligence
Platform allows an authenticated attacker to upload malicious code over the
network, that could be executed by the application. On successful
exploitation, the attacker can cause a low impact on the Integrity of the
application.
The record
Technical detail
- CVSS v3.1
- 3.7 · LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00345 · 26.8th percentile
- Weakness
- CWE-434 · Unrestricted Upload of File with Dangerous Type
- Published
- 2024-08-13T04:05Z
EPSS history
Timeline