CVEvulnerability

CVE-2023-25618

6.5 MEDIUM Published 2023-03-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400

Description

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in an unused class for error handling in which an attacker authenticated as a non-administrative user can craft a request with certain parameters which will consume the server's resources sufficiently to make it unavailable. There is no ability to view or modify any information.

Affected configurations

• sap netweaver application server abap 700 • sap netweaver application server abap 701 • sap netweaver application server abap 702 • sap netweaver application server abap 731 • sap netweaver application server abap 740 • sap netweaver application server abap 750 • sap netweaver application server abap 751 • sap netweaver application server abap 752 • sap netweaver application server abap 753 • sap netweaver application server abap 754 • sap netweaver application server abap 755 • sap netweaver application server abap 756 • sap netweaver application server abap 757 • sap netweaver application server abap 791

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References