CVEvulnerability

CVE-2023-35871

9.4 CRITICAL Published 2023-07-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS 3.1 ([email protected])
9.4 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Weaknesses
CWE-787

Description

The SAP Web Dispatcher - versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.89, WEBDISP 7.91, WEBDISP 7.92, WEBDISP 7.93, KERNEL 7.53, KERNEL 7.54 KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KRNL64UC 7.53, HDB 2.00, XS_ADVANCED_RUNTIME 1.00, SAP_EXTENDED_APP_SERVICES 1, has a vulnerability that can be exploited by an unauthenticated attacker to cause memory corruption through logical errors in memory management this may leads to information disclosure or system crashes, which can have low impact on confidentiality and high impact on the integrity and availability of the system.

Affected configurations

• sap web dispatcher 7.53 • sap web dispatcher 7.54 • sap web dispatcher 7.77 • sap web dispatcher 7.85 • sap web dispatcher 7.89 • sap web dispatcher 7.91 • sap web dispatcher 7.92 • sap web dispatcher 7.93 • sap web dispatcher hdb 2.00 • sap web dispatcher kernel 7.53 • sap web dispatcher kernel 7.54 • sap web dispatcher kernel 7.77 • sap web dispatcher kernel 7.85 • sap web dispatcher kernel 7.89 • sap web dispatcher kernel 7.91 • sap web dispatcher kernel 7.92 • sap web dispatcher kernel 7.93 • sap web dispatcher krnl64uc 7.53 • sap web dispatcher sap extended app services 1 • sap web dispatcher xs advanced runtime 1.00

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References