← Back

CVE-2023-32114

nvd nist
Published: Jun 13, 2023Modified: Nov 21, 2024

JSON object

Loading...
2.7
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Exploitability: 1.2 / Impact: 1.4
Source: NVD

Description

SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin privileges to maliciously run a benchmark program repeatedly in intent to slowdown or make the server unavailable which may lead to a limited impact on Availability with No impact on Confidentiality and Integrity of the application.

Affected (11)

Products: Sap: Netweaver
Sap
1 product
Netweaver
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Sap
Netweaver
Version 702
Netweaver
Version 731
Netweaver
Version 740
Netweaver
Version 750
Netweaver
Version 751
Netweaver
Version 752
Netweaver
Version 753
Netweaver
Version 754
Netweaver
Version 755
Netweaver
Version 756
Netweaver
Version 757

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (4)

Source: cna@sap.com
Permissions Required
Source: cna@sap.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.