VULNERABILITY INTELLIGENCE

CVE-2023-25616

CVSS score9.9 CRITICAL
EPSS probability0.95%
CISA KEVNot currently listed
Published2023-03-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.

Weakness classification

  • cna@sap.com: CWE-74
  • nvd@nist.gov: CWE-74

Primary references