CVE-2023-36923 — Code Injection vulnerability in SAP PowerDesigner
SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library, that can be execut…
Published: 2023-08-08 · CVSS: 7.8 · CVSS 3.1
SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library, that can be executed by the application. An attacker could thereby control the behavior of the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7