Vulnerability Details CVE-2023-25616
In some scenario, SAP Business Objects Business Intelligence Platform (CMC) - versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.8%
CVSS Severity
CVSS v3 Score 9.9
References
Products affected by CVE-2023-25616
-
cpe:2.3:a:sap:business_objects_business_intelligence_platform:420
-
cpe:2.3:a:sap:business_objects_business_intelligence_platform:430