CVE-2023-25616: 
SAP BusinessObjects Business Intelligence Platform vulnerability analysis and mitigation

CVE-2023-25616 is a critical code injection vulnerability affecting SAP Business Objects Business Intelligence Platform (CMC) versions 420 and 430. The vulnerability was disclosed in March 2023 with a CVSS v3.1 base score of 9.9 (Critical), indicating its severe nature (SAP Advisory, NVD).

The vulnerability is classified as an improper neutralization of special elements in output used by a downstream component (CWE-74). It received a CVSS v3.1 base score of 9.9 (Critical) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating network accessibility, low attack complexity, low privileges required, no user interaction needed, and high impacts on confidentiality, integrity, and availability (NVD).

A successful exploitation of this vulnerability could allow an attacker to gain access to resources that are only available to privileged users. The attack could significantly impact the system's confidentiality, integrity, and availability (SOCRadar).

SAP has released security patches to address this vulnerability as part of its March 2023 patch day. Organizations are strongly advised to apply the security fixes as soon as possible (CERT-EU).