# Vulnerabilities published in 2023


- [CVE-2023-0016](https://insights.sbomify.com/CVE-2023-0016/): SQL Injection vulnerability in SAP Business Planning and Consolidation MS (critical 9.9)
- [CVE-2023-0015](https://insights.sbomify.com/CVE-2023-0015/): Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence) (medium 4.6)
- [CVE-2023-0014](https://insights.sbomify.com/CVE-2023-0014/): Capture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (critical 9.0)
- [CVE-2023-0013](https://insights.sbomify.com/CVE-2023-0013/): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (medium 6.1)
- [CVE-2023-0012](https://insights.sbomify.com/CVE-2023-0012/): Local Privilege Escalation in SAP Host Agent (Windows) (medium 6.4)
- [CVE-2023-0011](https://insights.sbomify.com/CVE-2023-0011/): Command Execution through Serial Interface of u-blox TOBY-L2 (high 7.6)
- [CVE-2023-0010](https://insights.sbomify.com/CVE-2023-0010/): PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication (medium 5.4)
- [CVE-2023-0009](https://insights.sbomify.com/CVE-2023-0009/): GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (high 7.8)
- [CVE-2023-0008](https://insights.sbomify.com/CVE-2023-0008/): PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface (medium 4.4)
- [CVE-2023-0007](https://insights.sbomify.com/CVE-2023-0007/): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface (medium 6.5)
- [CVE-2023-0006](https://insights.sbomify.com/CVE-2023-0006/): GlobalProtect App: Local File Deletion Vulnerability (medium 6.3)
- [CVE-2023-0005](https://insights.sbomify.com/CVE-2023-0005/): PAN-OS: Exposure of Sensitive Information Vulnerability (medium 4.1)
- [CVE-2023-0004](https://insights.sbomify.com/CVE-2023-0004/): PAN-OS: Local File Deletion Vulnerability (medium 6.5)
- [CVE-2023-0003](https://insights.sbomify.com/CVE-2023-0003/): Cortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server (medium 6.5)
- [CVE-2023-0002](https://insights.sbomify.com/CVE-2023-0002/): Cortex XDR Agent: Product Disruption by Local Windows User (medium 5.5)
- [CVE-2023-0001](https://insights.sbomify.com/CVE-2023-0001/): Cortex XDR Agent: Cleartext Exposure of Agent Admin Password (medium 6.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/430/