It’s a hot 0-day summer for Apple, Google, and Microsoft security fixes
60
CVE-2023-33989
—CVSS 3.1
8.1 high
EPSS
<1%p60
Published
()
Modified
Description
An attacker with non-administrative authorizations in SAP NetWeaver (BI CONT ADD ON) - versions 707, 737, 747, 757, can exploit a directory traversal flaw to over-write system files. Data from confidential files cannot be read but potentially some OS files can be over-written leading to system compromise.
- Vendors
- sap
- Products
- netweaver bi content
- Weakness
- CWE-22
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H