Vulnerabilities > CVE-2023-27896 - Unspecified vulnerability in SAP Businessobjects Business Intelligence 420/430

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
sap

Summary

In SAP BusinessObjects Business Intelligence Platform - version 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own CMS, leading to a high impact on availability.

Vulnerable Configurations

Part Description Count
Application
Sap
2