Code injection

2023-03-1405:15:00

PRIOn knowledge base

www.prio-n.com

sap business objects

code injection

vulnerability

authorization bypass

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.7%

JSON

In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.

CPENameOperatorVersion
business_objects_business_intelligence_platformeq430
business_objects_business_intelligence_platformeq420

CPE	Name	Operator	Version
	business_objects_business_intelligence_platform	eq	430
	business_objects_business_intelligence_platform	eq	420

References

launchpad.support.sap.com/

www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html