CVE-2023-40310

🗓️ 10 Oct 2023 02:10:15Reported by [email protected]Type

SAP PowerDesigner Client - version 16.7 does not validate BPMN2 XML document from untrusted source, leading to potential impact on availability

Reporter	Title	Published	Views	Family All 4
Prion	Xxe	10 Oct 202302:15	–	prion
Cvelist	CVE-2023-40310 Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import	10 Oct 202301:35	–	cvelist
NVD	CVE-2023-40310	10 Oct 202302:15	–	nvd
Vulnrichment	CVE-2023-40310 Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import	10 Oct 202301:35	–	vulnrichment

Nvd

Node

sap powerdesignerMatch16.7

Source	Link
sap	www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
me	www.me.sap.com/notes/3357154

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Oct 2023 02:15Current

7.5High risk

Vulners AI Score7.5

CVSS37.5

EPSS0.001

CWE-112