SAP PowerDesigner vulnerabilities

2 known vulnerabilities in SAP PowerDesigner from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SAP PowerDesigner: Missing Authentication for Critical Functionality

  CVE-2023-37483Aug 8, 2023SAPEPSS 4.78%

  SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to run arbitrary queries against the back-end database via Proxy.

• 7.8 High severity

  SAP PowerDesigner: Improper Control of Generation of Code

  CVE-2023-36923Aug 8, 2023SAP

  SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library, that can be executed by the application. An attacker could thereby control the behavior of the applic