CVEvulnerability

CVE-2023-24521

6.1 MEDIUM Published 2023-02-14 Modified 2026-10-28 Official page ↗
Status
Modified
Published
2023-02-14
Last modified
2026-10-28
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79

Description

Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated user to alter the current session of the user by injecting the malicious code over the network and gain access to the unintended data. This may lead to a limited impact on the confidentiality and the integrity of the application.

Affected configurations

• sap netweaver as abap business server pages 700 • sap netweaver as abap business server pages 701 • sap netweaver as abap business server pages 702 • sap netweaver as abap business server pages 731 • sap netweaver as abap business server pages 740 • sap netweaver as abap business server pages 750 • sap netweaver as abap business server pages 751 • sap netweaver as abap business server pages 752 • sap netweaver as abap business server pages 753 • sap netweaver as abap business server pages 754 • sap netweaver as abap business server pages 755 • sap netweaver as abap business server pages 756 • sap netweaver as abap business server pages 757

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References