CVE-2024-41731
Severity
4.3MEDIUM
EPSS
0.6%
top 31.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 13
Description
SAP BusinessObjects Business Intelligence
Platform allows an authenticated attacker to upload malicious code over the
network, that could be executed by the application. On successful exploitation,
the attacker can cause a low impact on the Integrity of the application.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 1.6 | Impact: 1.4
Affected Packages2 packages
🔴Vulnerability Details
2CVEList▶
Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform↗2024-08-13
GHSA▶
GHSA-hvr2-rrr8-q8r2: SAP BusinessObjects Business Intelligence
Platform allows an authenticated attacker to upload malicious code over the
network, that could be executed↗2024-08-13