CVE-2023-37489: Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)
Due to the lack of validation, SAP BusinessObjects Business Intelligence Platform (Version Management System) - version 403, permits an unauthenticated user to read the code snippet through the UI, which leads to low impact on confidentiality and no impact on the application's availability or integrity.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this SAP BusinessObjects Business Intelligence Platform vulnerability?
The vulnerability ID for this SAP BusinessObjects Business Intelligence Platform vulnerability is CVE-2023-37489.
What is the severity level of CVE-2023-37489?
The severity level of CVE-2023-37489 is medium, with a severity value of 5.3.
What is the impact of CVE-2023-37489 on confidentiality and availability?
CVE-2023-37489 has a low impact on confidentiality, and no impact on the application's availability or integrity.
How can an unauthenticated user exploit CVE-2023-37489?
An unauthenticated user can exploit CVE-2023-37489 by reading the code snippet through the UI.
Are there any patches or updates available to fix CVE-2023-37489?
Please refer to the SAP Notes page (https://me.sap.com/notes/3352453) or the SAP document (https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html) for information on patches or updates to fix CVE-2023-37489.