GHSA-p36f-hqc8-f7jr
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: June 25, 2025 8:46 PM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.