CVE-2023-40310

概要

参考情報

• me.sap.com/notes/3357154 · Permissions Required
• sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory

powerdesigner のその他の脆弱性

• CVE-2023-40621中 6.3SAP PowerDesigner Client - version 16.7, allows an unauthenticated attacker to inject VBScript code in a document and have it opened by an u…
• CVE-2023-37484中 5.3SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user provided one during logi…
• CVE-2023-37483緊急 9.8SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to run arbitrary queries against…
• CVE-2023-36923高 7.8SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a …