CVE-2024-28166
Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform
- State
- Published
- Severity
- 3.7 Low
- Published
- Aug 13, 2024
- Updated
- Dec 10, 2024
- Reserved
- Mar 6, 2024
Description
SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.7 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N | sap |
Weaknesses
- CWE-434 Unrestricted Upload of File with Dangerous Type
Affected Products
| Product | Versions |
|---|---|
SAP BusinessObjects Business Intelligence PlatformSAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.