← voltar
CVE-2023-0022criticalCWE-94

Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP)

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.9epss 0.7%
probabilidade de exploração
0.7%top 47% das CVEs
exploração observada
nãonenhuma fonte reporta
SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious code that can be executed by the application over the network. On successful exploitation, an attacker can perform operations that may completely compromise the application causing a high impact on the confidentiality, integrity, and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H