CVE-2023-28762

published 2023-05-09

CVE-2023-28762: SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token…

Priority P3 44 high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token of any logged-in BI user over the network without any user interaction. The attacker can impersonate any user on the platform resulting into accessing and modifying data. The attacker can also make the system partially or entirely unavailable.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
sap	businessobjects_business_intelligence	—	—
sap	businessobjects_business_intelligence	—	—
sap_se	sap_businessobjects_intelligence_platform	—	—
sap_se	sap_businessobjects_intelligence_platform	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200