cveboard RSS feed

CVE-2023-33992

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA

The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW 740, SAP_BW 730, SAP_BW 750, DW4CORE 100, DW4CORE 200, DW4CORE 300, may expose unauthorized cell values to the data response. To be able to exploit this, the user still needs authorizations on the query as well as on the keyfigure/measure level. The missing check only affects the data level.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SAP Business Warehouse and SAP BW/4HANA

Vendor
SAP_SE
Product
SAP Business Warehouse and SAP BW/4HANA
Platforms
Unknown
Default status
unaffected
SAP Business Warehouse and SAP BW/4HANA · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
SAP_BW 730affectedUnavailableUnavailableUnavailableNone listed
SAP_BW 731affectedUnavailableUnavailableUnavailableNone listed
SAP_BW 740affectedUnavailableUnavailableUnavailableNone listed
SAP_BW 750affectedUnavailableUnavailableUnavailableNone listed
DW4CORE 100affectedUnavailableUnavailableUnavailableNone listed
DW4CORE 200affectedUnavailableUnavailableUnavailableNone listed
DW4CORE 300affectedUnavailableUnavailableUnavailableNone listed