Skip to content
OpenAdvisories
High · 7.8 CVE-2023-36923 EUVD-2023-40843GHSA-9vxj-c3q7-v3p8

Code Injection vulnerability in SAP PowerDesigner

Published Aug 8, 2023 · Updated Oct 10, 2024 · Assigned by sap

Description

SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library, that can be executed by the application. An attacker could thereby control the behavior of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP PowerDesigner 16.7 —

Advisories 1

References