High severity8.4NVD Advisory· Published Feb 14, 2023· Updated Jun 17, 2026

CVE-2023-24530

Description

SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application over the network. On successful exploitation, attacker can perform operations that may completely compromise the application causing high impact on confidentiality, integrity and availability of the application.

Affected products

SAP/Businessobjects Business Intelligence Platform2 versions
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:*:*:*:*
SAP/BusinessObjects Business Intelligence Platform (Web Intelligence)llm-fuzzy2 versions
420, 430+ 1 more
- (no CPE)range: 420, 430
- (no CPE)range: 420

Patches

Vulnerability mechanics

References

launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000