Description
SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library, that can be executed by the application. An attacker could thereby control the behavior of the application.
References (2)
Core 2
Core References
Permissions Required
https://me.sap.com/notes/3341599
Scores
CVSS v3
7.8
EPSS
0.0007
EPSS Percentile
21.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-94
Status
published
Products (1)
sap/powerdesigner
16.7
Published
Aug 08, 2023
Tracked Since
Feb 18, 2026