6.5
CVE-2023-29185
- EPSS 0.57%
- Veröffentlicht 11.04.2023 04:16:08
- Zuletzt bearbeitet 21.11.2024 07:56:40
- Erkennungen
LoginDenial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)
SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters in certain circumstances which can consume the server's resources sufficiently to make it unavailable over the network without any user interaction.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Netweaver As Abap Business Server Pages Version 700
SAP ≫ Netweaver As Abap Business Server Pages Version 701
SAP ≫ Netweaver As Abap Business Server Pages Version 702
SAP ≫ Netweaver As Abap Business Server Pages Version 731
SAP ≫ Netweaver As Abap Business Server Pages Version 740
SAP ≫ Netweaver As Abap Business Server Pages Version 750
SAP ≫ Netweaver As Abap Business Server Pages Version 751
SAP ≫ Netweaver As Abap Business Server Pages Version 752
SAP ≫ Netweaver As Abap Business Server Pages Version 753
SAP ≫ Netweaver As Abap Business Server Pages Version 754
SAP ≫ Netweaver As Abap Business Server Pages Version 755
SAP ≫ Netweaver As Abap Business Server Pages Version 756
SAP ≫ Netweaver As Abap Business Server Pages Version 757
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.57% | 0.427 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| SAP | 5.3 | 1.6 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
https://launchpad.support.sap.com/#/notes/3303060