Vulnerability Details CVE-2023-33989
An attacker with non-administrative authorizations in SAP NetWeaver (BI CONT ADD ON) - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system compromise.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.9%
CVSS Severity
CVSS v3 Score 8.7
References
Products affected by CVE-2023-33989
-
cpe:2.3:a:sap:netweaver_bi_content:707
-
cpe:2.3:a:sap:netweaver_bi_content:737
-
cpe:2.3:a:sap:netweaver_bi_content:747
-
cpe:2.3:a:sap:netweaver_bi_content:757