SAP Note 3256787
SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network.
HighCVSS 8.4BusinessObjects Business Intelligence Platform
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2023-24530
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Affected products and versions
- Product BusinessObjects Business Intelligence Platform (CMC)
Versions: 420, 430
Appears in
Patch Days listing this note, newest first.
- February 2023HighCVSS 8.4