Vulnerabilities > CVE-2023-40310 - Unspecified vulnerability in SAP Powerdesigner 16.7
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an untrusted source. As a result, URLs of external entities in BPMN2 file, although not used, would be accessed during import. A successful attack could impact availability of SAP PowerDesigner Client.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |