Description (CNA)
SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code that can be executed by the application due to Improper Control of Resource Identifiers.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Business Objects Business Intelligence Platform | affected < 4.2 |
CWE
CWE-99
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=545396222
- https://launchpad.support.sap.com/#/notes/2828558
ADP enrichment
No English description supplied.