CVE-2024-42375 — Unrestricted File Upload in SE SAP Businessobjects Business Intelligence Platform

CWE-434 — Unrestricted File Upload3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.4%
top 37.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Businessobjects Business Intelligence PlatformSAP Business Objects Business Intelligence Platform
Timeline
PublishedAug 13

Description

SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-gf9h-r59m-m9g4: SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed↗2024-08-13
▶
CVEList
Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform↗2024-08-13
▶
CVE-2024-42375 — Unrestricted File Upload | cvebase