Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-40310

SAP PowerDesigner Client - version 16.7, does not sufficiently validate BPMN2 XML document imported from an untrusted source. As a result, URLs of external entities in BPMN2 file, although not used, would be accessed during import. A successful attack could impact availability of SAP PowerDesigner Client.

Published

2023-10-10T02:15:10.680

Last Modified

2024-11-21T08:19:12.717

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-112
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap powerdesigner 16.7 Yes
References