Skip to content
SecondTuesday

SAP Note 3341599

Code Injection vulnerability in SAP PowerDesigner

HighCVSS 7.8SAP PowerDesigner

Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).

CVE(s)
CVE-2023-36923
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products and versions

Appears in

Patch Days listing this note, newest first.

SAP note on SAP for Me (SAP login required)