CVE Vulnerabilities

CVE-2023-29185

Published: Apr 11, 2023 | Modified: Apr 18, 2023
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters in certain circumstances which can consume the servers resources sufficiently to make it unavailable over the network without any user interaction.

Affected Software

Name Vendor Start Version End Version
Netweaver_as_abap_business_server_pages Sap 700 (including) 700 (including)
Netweaver_as_abap_business_server_pages Sap 701 (including) 701 (including)
Netweaver_as_abap_business_server_pages Sap 702 (including) 702 (including)
Netweaver_as_abap_business_server_pages Sap 731 (including) 731 (including)
Netweaver_as_abap_business_server_pages Sap 740 (including) 740 (including)
Netweaver_as_abap_business_server_pages Sap 750 (including) 750 (including)
Netweaver_as_abap_business_server_pages Sap 751 (including) 751 (including)
Netweaver_as_abap_business_server_pages Sap 752 (including) 752 (including)
Netweaver_as_abap_business_server_pages Sap 753 (including) 753 (including)
Netweaver_as_abap_business_server_pages Sap 754 (including) 754 (including)
Netweaver_as_abap_business_server_pages Sap 755 (including) 755 (including)
Netweaver_as_abap_business_server_pages Sap 756 (including) 756 (including)
Netweaver_as_abap_business_server_pages Sap 757 (including) 757 (including)

References