CVE-2023-37483

CriticalCVSS 9.8

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.04%

60th percentile - higher than 60% of all known CVEs

Summary

SAP PowerDesigner version 16.7 has improper access control which might allow an unauthenticated attacker to run arbitrary queries against the back-end database via Proxy.

Risk Assessment

The risk to the organization is the potential for unauthorized access to database data, which could lead to data leakage or manipulation.

Recommendation

It is recommended to upgrade to the latest version of SAP PowerDesigner and implement appropriate access control mechanisms.

Original NVD description (English source)

SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to run arbitrary queries against the back-end database via Proxy.