Description (CNA)
In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP / Business Objects Business Intelligence Platform (CMC) | affected 420; affected 430 |
CWE
CWE-74
References
- https://launchpad.support.sap.com/#/notes/3245526
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.