CVE-2023-37483

概要

参考情報

• me.sap.com/notes/3341460 · Permissions Required
• sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory

powerdesigner のその他の脆弱性

• CVE-2023-40310高 7.5SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an untrusted source. As a result, U…
• CVE-2023-40621中 6.3SAP PowerDesigner Client - version 16.7, allows an unauthenticated attacker to inject VBScript code in a document and have it opened by an u…
• CVE-2023-37484中 5.3SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user provided one during logi…
• CVE-2023-36923高 7.8SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a …