CVE-2023-29109

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows an Excel formula injection. An authorized attacker can inject arbitrary Excel formulas into fields like the Tooltip of the Custom Hints List. Once the victim opens the downloaded Excel document, the formula will be executed. As a result, an attacker can cause limited impact on the confidentiality and integrity of the application.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-1236

Affected software

No affected versions have been published.

Timeline

Published: Apr 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-29117.5If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-ti CVE-2023-291105.4The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, CVE-2023-291114.3The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the co CVE-2023-291125.4The SAP Application Interface (Message Monitoring) - versions 600, 700, allows an authorized attacker to input links or headings with custom CVE-2023-291136.3The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-pro CVE-2023-291145.7System logs could be accessed through web management application due to a lack of access control. An attacker can obtain the following sen CVE-2023-291156.5In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service (e.g. reboot).CVE-2023-291164.3Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or CVE-2023-291178.8Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system.CVE-2023-291188.8Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php.CVE-2023-291198.8Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php.CVE-2023-29127.5Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction.