Unrated severityNVD Advisory· Published Mar 14, 2023· Updated Feb 27, 2025

Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)

CVE-2023-25616

Description

In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.

Affected products

SAP/BusinessObjects Business Intelligence Platform (Web Intelligence)llm-fuzzy2 versions
= 420, 430+ 1 more
- (no CPE)range: = 420, 430
- (no CPE)range: 420

Patches

Vulnerability mechanics

References

launchpad.support.sap.commitre
www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000