Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_powerdesigner:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Powerdesigner (2f4c6773-6a38-5a18-973b-3c6153b03091)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37484 vulnerable 2026-06-08 06:08:15.489850 Information Disclosure Vulnerabilities in SAP PowerDesigner
MEDIUM (5.3)
SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user provided one during login attempt, which might allow an attacker to access password hashes from the client's memory.
Published: 2023-08-08T00:40:36.427Z
Updated: 2024-10-10T19:28:52.145Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37483 vulnerable 2026-06-08 06:08:15.489314 Improper Access Control Vulnerabilities in SAP PowerDesigner
CRITICAL (9.8)
SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to run arbitrary queries against the back-end database via Proxy.
Published: 2023-08-08T00:39:33.487Z
Updated: 2024-10-10T19:00:59.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36923 vulnerable 2026-06-08 06:08:14.704970 Code Injection vulnerability in SAP PowerDesigner
HIGH (7.8)
SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library, that can be executed by the application. An attacker could thereby control the behavior of the application.
Published: 2023-08-08T00:36:59.717Z
Updated: 2024-10-10T19:03:13.309Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.