Описание
SAP PowerDesigner Client - version 16.7, allows an unauthenticated attacker to inject VBScript code in a document and have it opened by an unsuspecting user, to have it executed by the application on behalf of the user. The application has a security option to disable or prompt users before untrusted scripts are executed, but this is not set as default.
Ссылки
- Permissions Required
- Vendor Advisory
- Permissions Required
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:sap:powerdesigner:16.7:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00336
Низкий
6.3 Medium
CVSS3
Дефекты
CWE-94
Связанные уязвимости
CVSS3: 6.3
github
больше 2 лет назад
SAP PowerDesigner Client - version 16.7, allows an unauthenticated attacker to inject VBScript code in a document and have it opened by an unsuspecting user, to have it executed by the application on behalf of the user. The application has a security option to disable or prompt users before untrusted scripts are executed, but this is not set as default.
EPSS
Процентиль: 56%
0.00336
Низкий
6.3 Medium
CVSS3
Дефекты
CWE-94