CVE-2023-37489 Vulnerability Details

  /     /     /  

CVE-2023-37489 Metadata Quick Info

CVE Published: 12/09/2023 | CVE Updated: 26/09/2024 | CVE Year: 2023
Source: sap | Vendor: SAP_SE | Product: SAP BusinessObjects Business Intelligence Platform (Version Management System)
Status : PUBLISHED

---

CVE-2023-37489 Description

Due to the lack of validation, SAP BusinessObjects Business Intelligence Platform (Version Management System) - version 403, permits an unauthenticated user to read the code snippet through the UI, which leads to low impact on confidentiality and no impact on the application\'s availability or integrity.

Metrics

CVSS Version: 3.1 | Base Score: 5.3 MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

l➤ Exploitability Metrics:
    Attack Vector (AV)* NETWORK
    Attack Complexity (AC)* LOW
    Privileges Required (PR)* NONE
    User Interaction (UI)* NONE
    Scope (S)* UNCHANGED

l➤ Impact Metrics:
    Confidentiality Impact (C)* LOW
    Integrity Impact (I)* NONE
    Availability Impact (A)* NONE

Weakness Enumeration (CWE)

CWE-ID: CWE-209
CWE Name: CWE-209: Generation of Error Message Containing Sensitive Information
Source: SAP_SE

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).