VULNERABILITY INTELLIGENCE
CVE-2024-28166
CVSS score3.7 LOW
EPSS probability0.34%
CISA KEVNot currently listed
Published2024-08-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application.
Weakness classification
- cna@sap.com: CWE-434
Primary references
- cna@sap.com — Permissions Required
- cna@sap.com
- cna@sap.com — Vendor Advisory