CVE-2024-45281CWE-426

DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform

Medium · published September 10, 2024

CVSS v3.1
5.8
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The attacker needs to have local access to the vulnerable system to perform DLL related tasks. This could result in a high impact on confidentiality and integrity of the application.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00164 · 5.3th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2024-09-10T04:32Z
EPSS history
Timeline
  • 10 SEP 04:32Z
    DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform
    cvelistv5