Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-42456 State: PUBLISHED Published: 2023-09-21T15:20:56.969Z Last Updated: 2025-02-13T17:09:21.662Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L) Vendors: memorysafety Products: sudo-rs Problem Types: CWE-23, CWE-22 Description: Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo attempt, but instead only requiring authentication every once in a while in every terminal or process group. Only once a configurable timeout has passed will the user have to re-authenticate themselves. Supporting this functionality is a set of session files (timestamps) for each user, stored in `/var/run/sudo-rs/
selves. Supporting this functionality is a set of session files (timestamps) for each user, stored in `/var/run/sudo-rs/ts`. These files are named according to the username from which the sudo attempt is made (the origin user). An issue was discovered in versions prior to 0.2.1 where usernames containing the `.` and `/` characters could result in the corruption of specific files on the filesystem. As usernames are generally not limited by the characters they can contain, a username appearing to be a relative path can be constructed. For example we could add a user to the system containing the username `../../../../bin/cp`. When logged in as a user with that name, that user could run `sudo -K
stem containing the username `../../../../bin/cp`. When logged in as a user with that name, that user could run `sudo -K` to clear their session record file. The session code then constructs the path to the session file by concatenating the username to the session file storage directory, resulting in a resolved path of `/bin/cp`. The code then clears that file, resulting in the `cp` binary effectively being removed from the system. An attacker needs to be able to login as a user with a constructed username. Given that such a username is unlikely to exist on an existing system, they will also need to be able to create the users with the constructed usernames. The issue is patched in version 0
em, they will also need to be able to create the users with the constructed usernames. The issue is patched in version 0.2.1 of sudo-rs. Sudo-rs now uses the uid for the user instead of their username for determining the filename. Note that an upgrade to this version will result in existing session files being ignored and users will be forced to re-authenticate. It also fully eliminates any possibility of path traversal, given that uids are always integer values. The `sudo -K` and `sudo -k` commands can run, even if a user has no sudo access. As a workaround, make sure that one's system does not contain any users with a specially crafted username. While this is the case and while untrusted u
one's system does not contain any users with a specially crafted username. While this is the case and while untrusted users do not have the ability to create arbitrary users on the system, one should not be able to exploit this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/memorysafety/sudo-rs/security/advisories/GHSA-2r3c-m6v7-9354 - https://github.com/memorysafety/sudo-rs/commit/bfdbda22968e3de43fa8246cab1681cfd5d5493d - http://www.openwall.com/lists/oss-security/2023/11/02/1 - https://ferrous-systems.com/blog/sudo-rs-audit/
CVE ID: CVE-2023-42457 State: PUBLISHED Published: 2023-09-21T14:49:32.123Z Last Updated: 2025-02-13T17:09:22.325Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: plone Products: plone.rest Problem Types: CWE-400, CWE-770 Description: plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the `++api++` traverser is accidentally used multiple times in a url, handling it takes increasingly longer, making the server less responsive. Patches are available in `plone.rest` 2.0.1 and 3.0.1. Series 1.x is not affected. As a workaround, one may redirect `/++api++/++
re available in `plone.rest` 2.0.1 and 3.0.1. Series 1.x is not affected. As a workaround, one may redirect `/++api++/++api++` to `/++api++` in one's frontend web server (nginx, Apache). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/plone/plone.rest/security/advisories/GHSA-h6rp-mprm-xgcq - https://github.com/plone/plone.rest/commit/43b4a7e86206e237e1de5ca3817ed071575882f7 - https://github.com/plone/plone.rest/commit/77846a9842889b24f35e8bedc2e9d461388d3302 - http://www.openwall.com/lists/oss-security/2023/09/22/2
CVE ID: CVE-2023-42458 State: PUBLISHED Published: 2023-09-21T16:34:11.747Z Last Updated: 2025-02-13T17:09:22.913Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: zopefoundation Products: Zope Problem Types: CWE-80, CWE-79 Description: Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scripting vulnerability for SVG images. Note that an image tag with an SVG image as source is never vulnerable, even when the SVG image contains malicious code. To exploit the vulnerability, an attacker would first need to upload an image, and then trick a user into following a specially crafted link. Patches are availa
r would first need to upload an image, and then trick a user into following a specially crafted link. Patches are available in Zope 4.8.10 and 5.8.5. As a workaround, make sure the "Add Documents, Images, and Files" permission is only assigned to trusted roles. By default, only the Manager has this permission. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zopefoundation/Zope/security/advisories/GHSA-wm8q-9975-xh5v - https://github.com/zopefoundation/Zope/commit/26a55dbc301db417f47cafda6fe0f983b5690088 - https://github.com/zopefoundation/Zope/commit/603b0a12881c90a072a7a65e32d47ed898ce37cb - http://www.openwall.com/lists/oss-secur
github.com/zopefoundation/Zope/commit/603b0a12881c90a072a7a65e32d47ed898ce37cb - http://www.openwall.com/lists/oss-security/2023/09/22/2
CVE ID: CVE-2023-42459 State: PUBLISHED Published: 2023-10-16T20:56:04.284Z Last Updated: 2025-02-13T17:09:23.468Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: eProsima Products: Fast-DDS Problem Types: CWE-415, CWE-416, CWE-590 Description: Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free() could potentially leave the pointer in the attackers control which could lead to a double free. This issue has been addressed
potentially leave the pointer in the attackers control which could lead to a double free. This issue has been addressed in versions 2.12.0, 2.11.3, 2.10.3, and 2.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-gq8g-fj58-22gm - https://github.com/eProsima/Fast-DDS/issues/3207 - https://github.com/eProsima/Fast-DDS/pull/3824 - https://www.debian.org/security/2023/dsa-5568
CVE ID: CVE-2023-42460 State: PUBLISHED Published: 2023-09-26T18:47:09.721Z Last Updated: 2024-09-24T13:45:05.798Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: vyperlang Products: vyper Problem Types: CWE-682 Description: Vyper is a Pythonic Smart Contract Language for the EVM. The `_abi_decode()` function does not validate input when it is nested in an expression. Uses of `_abi_decode()` can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, but a fix is expected in release `0.3.10`. Users are advised to reference pull request #3626. Additional Analyst Notes: - CVE Program Cont
ted in release `0.3.10`. Users are advised to reference pull request #3626. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vyperlang/vyper/security/advisories/GHSA-cx2q-hfxr-rj97 - https://github.com/vyperlang/vyper/pull/3626
CVE ID: CVE-2023-42461 State: PUBLISHED Published: 2023-09-26T22:45:26.071Z Last Updated: 2024-09-23T19:32:26.308Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-89 Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The ITIL actors input field from the Ticket form can be used to perform a SQL injection. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CIS
10.0.10. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-x3jp-69f2-p84w
CVE ID: CVE-2023-42462 State: PUBLISHED Published: 2023-09-26T22:46:27.213Z Last Updated: 2024-09-23T19:26:41.531Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: glpi-project Products: glpi Problem Types: CWE-22 Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The document upload process can be diverted to delete some files. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
wn workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-hm76-jh96-7j75
CVE ID: CVE-2023-42463 State: PUBLISHED Published: 2024-01-12T20:55:53.560Z Last Updated: 2024-10-24T15:29:24.764Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wazuh Products: wazuh Problem Types: CWE-121 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. This bug introduced a stack overflow hazard that could allow a local privilege escalation. This vulnerability was patched in version 4.5.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-27p5-32pp-r58r
CVE ID: CVE-2023-42464 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-08-02T19:23:39.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17. When parsing Spotlight RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the underlying protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and th
returns the object associated with a key, a malicious actor may be able to fully control the value of the pointer and theoretically achieve Remote Code Execution on the host. This issue is similar to CVE-2023-34967. Additional Analyst Notes: - CVE Program Container: References: - https://netatalk.sourceforge.io/ - https://github.com/Netatalk/netatalk/issues/486 - https://www.debian.org/security/2023/dsa-5503 - https://lists.debian.org/debian-lts-announce/2023/09/msg00031.html - https://netatalk.sourceforge.io/CVE-2023-42464.php - https://netatalk.sourceforge.io/3.1/htmldocs/afpd.8.html - https://netatalk.io/security/CVE-2023-42464
CVE ID: CVE-2023-42465 State: PUBLISHED Published: 2023-12-22T00:00:00.000Z Last Updated: 2025-11-04T21:08:25.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit. Additional Analyst Notes: - CVE Program Container: References: - https://www.sudo.ws/releases/changelog/ - https://www.openwall.com/lists/oss-security/2023/12/21/9 - https://github.com/sudo-project/sudo/commit/7873f8334c8d31031f8cfa83bd97ac6029309e4
om/lists/oss-security/2023/12/21/9 - https://github.com/sudo-project/sudo/commit/7873f8334c8d31031f8cfa83bd97ac6029309e4f - https://arxiv.org/abs/2309.02545 - https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_15 - https://security.gentoo.org/glsa/202401-29 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6XMRUJCPII4MPWG43HTYR76DGLEYEFZ/ - https://security.netapp.com/advisory/ntap-20240208-0002/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R4Q23NHCKCLFIHSNY6KJ27GM7FSCEVXM/
CVE ID: CVE-2023-42467 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T17:36:32.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/qemu-project/qemu/-/issues/1813 - https://gitlab.com/qemu-project/qemu/-/commit/7cfcc79b0ab800959716738aff9419f53fc68c9c - https://security.netapp.com/advisory/ntap-20231103-0005/
CVE ID: CVE-2023-42468 State: PUBLISHED Published: 2023-09-13T00:00:00 Last Updated: 2024-09-26T13:53:21.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application (without any permissions) can craft an intent targeting com.cutestudio.dialer.activities.DialerActivity via the android.intent.action.CALL action in conjunction with a tel: URI, thereby placing a phone call. Additional Analyst Notes: - CVE Program Container: - CISA ADP
onjunction with a tel: URI, thereby placing a phone call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.cutestudio.colordialer/blob/main/CWE-284.md - https://github.com/actuator/com.cutestudio.colordialer/blob/main/dialerPOC.apk - https://github.com/actuator/com.cutestudio.colordialer/blob/main/dial.gif - https://github.com/actuator/cve/blob/main/CVE-2023-42468
CVE ID: CVE-2023-42469 State: PUBLISHED Published: 2023-09-13T00:00:00 Last Updated: 2024-09-25T20:51:32.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.full.dialer.top.secure.encrypted.activities.DialerActivity component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.full.dialer.top.secure.encrypted - https://github.com/actuator/com.full.dialer.top.secure.encrypted/blob/main/poc.apk
m.full.dialer.top.secure.encrypted - https://github.com/actuator/com.full.dialer.top.secure.encrypted/blob/main/poc.apk - https://github.com/actuator/com.full.dialer.top.secure.encrypted/blob/main/dial.gif - https://github.com/actuator/cve/blob/main/CVE-2023-42469
CVE ID: CVE-2023-42470 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:15:37.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/imou/blob/main/imou-life-6.8.0.md - https://github.com/actuator/imou/blob/main/poc.apk - https://github.
ub.com/actuator/imou/blob/main/imou-life-6.8.0.md - https://github.com/actuator/imou/blob/main/poc.apk - https://github.com/actuator/cve/blob/main/CVE-2023-42470
CVE ID: CVE-2023-42471 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:14:19.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a manifest entry that exports the wave.ai.browser.ui.splash.SplashScreen activity. This activity uses a WebView component to display web content and doesn't adequately validate or sanitize the URI or any extra data passed in the intent by a third party application (with no permissions). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
lication (with no permissions). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/wave.ai.browser/blob/main/CWE-94.md - https://github.com/actuator/wave.ai.browser/blob/main/poc.apk - https://github.com/actuator/cve/blob/main/CVE-2023-42471
CVE ID: CVE-2023-42472 State: PUBLISHED Published: 2023-09-12T01:58:32.439Z Last Updated: 2024-09-26T14:44:15.752Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: SAP_SE Products: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) Problem Types: CWE-434 Description: Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to re
g the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3370490 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-42473 State: PUBLISHED Published: 2023-10-10T01:36:20.097Z Last Updated: 2025-02-27T20:46:26.323Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: SAP_SE Products: S/4HANA (Manage Withholding Tax Items) Problem Types: CWE-862 Description: S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges which has low impact on the confidentiality and integrity of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3219846 - https://www.sap.com/documents/2022/02/fa8
ner: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3219846 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-42474 State: PUBLISHED Published: 2023-10-10T01:36:59.916Z Last Updated: 2024-09-18T19:08:59.551Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: SAP_SE Products: SAP BusinessObjects Web Intelligence Problem Types: CWE-79 Description: SAP BusinessObjects Web Intelligence - version 420, has a URL with parameter that could be vulnerable to XSS attack. The attacker could send a malicious link to a user that would possibly allow an attacker to retrieve the sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3372991 - https://www.sap.com/documents/2022/02/fa865e
: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3372991 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-42475 State: PUBLISHED Published: 2023-10-10T01:37:36.327Z Last Updated: 2024-09-28T22:13:00.204Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP S/4HANA Core Problem Types: CWE-209 Description: The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3222121 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-42476 State: PUBLISHED Published: 2023-12-12T00:58:05.617Z Last Updated: 2024-08-02T19:23:40.085Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: SAP_SE Products: SAP BusinessObjects Web Intelligence Problem Types: CWE-79 Description: SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject JavaScript code into Web Intelligence documents which is then executed in the victim’s browser each time the vulnerable page is visited. Successful exploitation can lead to exposure of the data that the user has access to. In the worst case, attacker could access data from reporting databases. Additional Analyst Note
the user has access to. In the worst case, attacker could access data from reporting databases. Additional Analyst Notes: - CVE Program Container: References: - https://me.sap.com/notes/3382353 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-42477 State: PUBLISHED Published: 2023-10-10T01:37:54.816Z Last Updated: 2024-09-18T18:55:58.441Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP NetWeaver AS Java Problem Types: CWE-918 Description: SAP NetWeaver AS Java (GRMG Heartbeat application) - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing limited impact on confidentiality and integrity of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3333426 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-42478 State: PUBLISHED Published: 2023-12-12T00:58:53.443Z Last Updated: 2024-08-02T19:23:39.646Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L) Vendors: SAP_SE Products: Business Objects BI Platform Problem Types: CWE-79 Description: SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when opened by any other user could lead to high impact on integrity of the application. Additional Analyst Notes: - CVE Program Container: References: - https://me.sap.com/notes/3382353 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html