Lucene search
PRIOn knowledge basePRION:CVE-2023-40621HistorySep 12, 2023 - 3:15 a.m.
Default credentials
2023-09-1203:15:00
PRIOn knowledge base
www.prio-n.com
2
default credentials
unauthenticated attacker
vbscript code injection
security option
untrusted scripts
SAP PowerDesigner Client - version 16.7, allows an unauthenticated attacker to inject VBScript code in a document and have it opened by an unsuspecting user, to have it executed by the application on behalf of the user. The application has a security option to disable or prompt users before untrusted scripts are executed, but this is not set as default.
| CPE | Name | Operator | Version |
|---|---|---|---|
| powerdesigner | eq | 16.7 |
Related
nvd
nvd
CVE-2023-40621
2023-09-12 03:15:12
cve
cve
CVE-2023-40621
2023-09-12 03:15:12
cvelist
cvelist
CVE-2023-40621 Code Injection vulnerability in SAP PowerDesigner Client
2023-09-12 02:10:22