{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"420"}],"component":"sap-ai-sdk-base","cve_ids":["CVE-2023-25617"],"ecosystem":"PyPI","epss":0.00934,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xxhh-59gh-6ffx","id":"tcs_01M5KGKEVN9QCQFDP0BDEPDTD0","modified_at":"2026-06-10T17:02:40.448792564Z","published_at":"2023-03-14T05:15:29.877Z","references":["https://osv.dev/vulnerability/PYSEC-2023-315","https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html","https://launchpad.support.sap.com/#/notes/3283438","https://github.com/advisories/GHSA-xxhh-59gh-6ffx"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2023-315","url":"https://osv.dev/vulnerability/PYSEC-2023-315"}],"summary":"SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling"}