CVE-2023-33989

Summary

CVE-2023-33989 is a newly discovered vulnerability impacting the SAP NetWeaver Business Intelligence Cont Add-On in versions 707, 737, 747, and 757. This issue allows a non-administrative attacker to leverage a directory traversal flaw, enabling them to overwrite system files. Although data from confidential files cannot be directly read, some operating system files are at risk of being compromised, potentially leading to a system breach.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.