CVE-2023-40310 is a high-severity vulnerability affecting SAP PowerDesigner Client versions 16.7. It stems from insufficient validation of imported BPMN2 XML documents, leading to the client accessing URLs of external entities even if unused. This vulnerability has a CVSS score of 7.5, indicating a high impact on availability, and can be exploited remotely without user interaction or authentication. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
16.7CPE matchmatch criteria | cpe:2.3:a:sap:powerdesigner:16.7:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.