CVE-2023-37489

5.3 mediumEPSS 0.5%

Medium (5.3) in sap businessobjects business intelligence. EPSS 0.5% chance of exploitation in the next 30 days.

Due to the lack of validation, SAP BusinessObjects Business Intelligence Platform (Version Management System) - version 403, permits an unauthenticated user to read the code snippet through the UI, which leads to low impact on confidentiality and no impact on the application's availability or integrity.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-209
Published: 2023-09-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:businessobjects_business_intelligence

References

https://me.sap.com/notes/3352453
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
https://me.sap.com/notes/3352453
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Check your stack JSON