Menu

  • Alerts
  • Incidents
  • News
  • APTs
  • Cyber Decoded
  • Cyber Hygiene
  • Cyber Review
  • Cyber Tips
  • Definitions
  • Malware
  • Threat Actors
  • Tutorials

Useful Tools

  • Password generator
  • Report an incident
  • Report to authorities
No Result
View All Result
CTF Hack Havoc
CyberMaterial
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
    • Report an incident
  • About
    • About Us
    • Advertise with us
Get Help
Hall of Hacks
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
    • Report an incident
  • About
    • About Us
    • Advertise with us
Get Help
No Result
View All Result
Hall of Hacks
CyberMaterial
No Result
View All Result
Home Alerts

SAP fixes critical bugs in Diagnostics Agent

April 13, 2023
Reading Time: 1 min read
in Alerts

 

SAP has released security updates for April 2023, addressing a total of 24 notes, 19 of which are new vulnerabilities. The two most severe flaws are CVE-2023-27267 and CVE-2023-28765. The first affects SAP Diagnostics Agent, allowing attackers to execute scripts and potentially compromise the system.

The second affects SAP BusinessObjects Business Intelligence Platform, giving attackers access to user passwords and compromising the application.

Furthermore, CVE-2023-27267 is a missing authentication and insufficient input validation issue in the OSCommand Bridge of SAP Diagnostics Agent, version 720. This flaw can be exploited to execute scripts on connected Diagnostics Agents, potentially leading to full compromise of the system.

At the same time, CVE-2023-28765 affects SAP BusinessObjects Business Intelligence Platform (Promotion Management) – versions 420, 430. An attacker with basic privileges can exploit the vulnerability to access lcmbiar file and decrypt it.

Once the attacker has access to the BI user’s passwords, depending on the user’s privileges, they can perform operations that compromise the application.

Additionally, SAP administrators are advised to apply the available security patches as soon as possible to mitigate the risks associated with these vulnerabilities.

The complete list of the notes can be found in the latest security bulletin. By addressing the security issues, SAP ensures its customers’ systems are secure and helps prevent cybercriminals from exploiting vulnerabilities.

Reference:
  • SAP Patch Day Blog

Tags: April 2023Cyber AlertCyber Alerts 2023SAPSoftwareUpdatesVulnerabilities
ADVERTISEMENT

Related Posts

Hackers Revive SEO Poisoning

Hackers Revive SEO Poisoning

July 10, 2025
Hackers Revive SEO Poisoning

RondoDox Botnet Exploits Router Flaws

July 10, 2025
Hackers Revive SEO Poisoning

ServiceNow Data Exposure via ACLs

July 10, 2025
Hackers Use Leaked Shellter License Malware

Windows BitLocker Vulnerability Flaw

July 9, 2025
Hackers Use Leaked Shellter License Malware

Hackers Use Leaked Shellter License Malware

July 9, 2025
Hackers Use Leaked Shellter License Malware

Anatsa Android Trojan Targets 90K Users

July 9, 2025

Latest Alerts

RondoDox Botnet Exploits Router Flaws

ServiceNow Data Exposure via ACLs

Hackers Revive SEO Poisoning

Windows BitLocker Vulnerability Flaw

Anatsa Android Trojan Targets 90K Users

Hackers Use Leaked Shellter License Malware

Subscribe to our newsletter

    Latest Incidents

    Bitcoin Depot Breach Exposes Data

    McDonald’s AI Hiring Bot Exposes Data

    Nippon Steel Solutions Data Breach

    Norwegian Municipalities Hit by Data Breach

    Credit Reports Breached And Sold On Dark Web

    Recruiting Software Exposed 26M Resumes

    CyberMaterial Logo
    • About Us
    • Contact Us
    • Jobs
    • Legal and Privacy Policy
    • Site Map

    © 2025 | CyberMaterial | All rights reserved

    Welcome Back!

    Login to your account below

    Forgotten Password?

    Retrieve your password

    Please enter your username or email address to reset your password.

    Log In

    Add New Playlist

    No Result
    View All Result
    • Alerts
    • Incidents
    • News
    • Cyber Decoded
    • Cyber Hygiene
    • Cyber Review
    • Definitions
    • Malware
    • Cyber Tips
    • Tutorials
    • Advanced Persistent Threats
    • Threat Actors
    • Report an incident
    • Password Generator
    • About Us
    • Contact Us
    • Advertise with us

    Copyright © 2025 CyberMaterial