CVEvulnerability

CVE-2023-32114

2.7 LOW Published 2023-06-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-732

Description

SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin privileges to maliciously run a benchmark program repeatedly in intent to slowdown or make the server unavailable which may lead to a limited impact on Availability with No impact on Confidentiality and Integrity of the application.

Affected configurations

• sap netweaver 702 • sap netweaver 731 • sap netweaver 740 • sap netweaver 750 • sap netweaver 751 • sap netweaver 752 • sap netweaver 753 • sap netweaver 754 • sap netweaver 755 • sap netweaver 756 • sap netweaver 757

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References