CVE-2023-28764: SAP BusinessObjects Platform - versions 420, 430, Information design tool transmits sensitive information as cleartext in the binaries over the network. This…

PriorityP432medium5.9CVSS 3.1

AVNACHPRNUINSUCHINAN

EPSS

0.51%

39.9th percentile

SAP BusinessObjects Platform - versions 420, 430, Information design tool transmits sensitive information as cleartext in the binaries over the network. This could allow an unauthenticated attacker with deep knowledge to gain sensitive information such as user credentials and domain names, which may have a low impact on confidentiality and no impact on the integrity and availability of the system.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
sap	businessobjects	—	—
sap	businessobjects	—	—
sap_se	sap_businessobjects_platform	—	—
sap_se	sap_businessobjects_platform	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.