Approved changes feed: RSS · Atom

cpe:2.3:a:sap:businessobjects:420:*:*:*:-:*:*:*

part: a version: 420 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductBusinessobjects (41449a32-b994-5050-a032-626373b63fd6)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-40623 vulnerable 2026-06-03 14:52:50.223426 Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)
MEDIUM (6.2)
SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system.
Published: 2023-09-12T02:02:38.194Z
Updated: 2024-09-25T15:28:05.273Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.