Beveiligingsadvies

CVE-2023-40310

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-10-10 01:35:28

Laatst bijgewerkt 2024-09-18 19:07:54

Toegewezen door sap

CVSS-score 6.5

Status PUBLISHED

Beschrijving

SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an untrusted source. As a result, URLs of external entities in BPMN2 file, although not used, would be accessed during import. A successful attack could impact availability of SAP PowerDesigner Client.

← Alle CVE's bekijken Bekijk op cve.org ↗