CVE-2023-28763 in NetWeaver AS for ABAP and ABAP Platform

Riassunto

di MITRE • 11/04/2023

SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters which can consume the server's resources sufficiently to make it unavailable over the network without any user interaction.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: SAP SE
• Prenotare: 23/03/2023
• Divulgazione: 11/04/2023
• Moderazione: accettato
• Voce: VDB-225415
• CPE: pronto
• CWE: CWE-400 (confermato)
• CVSS: 6.5 (CNA)
• EPSS: 0.00613
• KEV: no
• Attività: molto basso
• Settore: Insurance, Telecommunication, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-28763
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-28763
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-28763/