Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j37h-pxr7-r959

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus allowing the attacker to control the behaviour of the application, leading to Remote Code Execution. Although the mode of attack is only Local, multiple applications can be impacted as a result of the vulnerability.

SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus allowing the attacker to control the behaviour of the application, leading to Remote Code Execution. Although the mode of attack is only Local, multiple applications can be impacted as a result of the vulnerability.

EPSS

Процентиль: 85%
0.02599
Низкий

8.2 High

CVSS3

Дефекты

CWE-416
CWE-94

Связанные уязвимости

CVSS3: 8.2
nvd
почти 6 лет назад

SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus allowing the attacker to control the behaviour of the application, leading to Remote Code Execution. Although the mode of attack is only Local, multiple applications can be impacted as a result of the vulnerability.

CVSS3: 7.5
fstec
почти 6 лет назад

Уязвимость платформы бизнес-аналитики SAP Business Objects Business Intelligence Platform, связанная с ошибками управления генерацией кода, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 85%
0.02599
Низкий

8.2 High

CVSS3

Дефекты

CWE-416
CWE-94