VULNERABILITY INTELLIGENCE

CVE-2023-24530

CVSS score8.4 HIGH

EPSS probability0.56%

CISA KEVNot currently listed

Published2023-02-14

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Description

SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network. On successful exploitation, attacker can perform operations that may completely compromise the application causing high impact on confidentiality, integrity and availability of the application.

Weakness classification

cna@sap.com: CWE-434

Primary references

cna@sap.com — Permissions Required, Vendor Advisory
cna@sap.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory