CVE-2024-28166

LOW

SAP Business Objects Business Intelli... - Unrestricted File Upload

Title source: rule
STIX 2.1

Description

SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application.

References (3)

Core 3
Core References
Permissions Required
https://me.sap.com/notes/3433545

Scores

CVSS v3 3.7
EPSS 0.0043
EPSS Percentile 62.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-434
Status published
Products (3)
sap/business_objects_business_intelligence_platform 430
sap/business_objects_business_intelligence_platform 440
sap/business_objects_business_intelligence_platform enterprise_420
Published Aug 13, 2024
Tracked Since Feb 18, 2026