CVE-2024-42375 — Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform

CVE-2024-42375

Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform PUBLISHED

Description (CNA)

SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP BusinessObjects Business Intelligence Platform	affected ENTERPRISE 430; affected 2025

CWE

CWE-434

References

https://me.sap.com/notes/3433545
https://me.sap.com/notes/3515653
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.