CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:P/I:N/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
86.6%
SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA (SAP Landscape Transformation), versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should be restricted, however due to missing authorization an attacker can get access to some sensitive internal information of vulnerable SAP system or to make vulnerable SAP systems completely unavailable.
Vendor | Product | Version | CPE |
---|---|---|---|
sap | netweaver_application_server_abap | 2011_1_620 | cpe:2.3:a:sap:netweaver_application_server_abap:2011_1_620:*:*:*:*:*:*:* |
sap | netweaver_application_server_abap | 2011_1_640 | cpe:2.3:a:sap:netweaver_application_server_abap:2011_1_640:*:*:*:*:*:*:* |
sap | netweaver_application_server_abap | 2011_1_700 | cpe:2.3:a:sap:netweaver_application_server_abap:2011_1_700:*:*:*:*:*:*:* |
sap | netweaver_application_server_abap | 2011_1_710 | cpe:2.3:a:sap:netweaver_application_server_abap:2011_1_710:*:*:*:*:*:*:* |
sap | netweaver_application_server_abap | 2011_1_730 | cpe:2.3:a:sap:netweaver_application_server_abap:2011_1_730:*:*:*:*:*:*:* |
sap | netweaver_application_server_abap | 2011_1_731 | cpe:2.3:a:sap:netweaver_application_server_abap:2011_1_731:*:*:*:*:*:*:* |
sap | netweaver_application_server_abap | 2011_1_752 | cpe:2.3:a:sap:netweaver_application_server_abap:2011_1_752:*:*:*:*:*:*:* |
sap | netweaver_application_server_abap | 2020 | cpe:2.3:a:sap:netweaver_application_server_abap:2020:*:*:*:*:*:*:* |
sap | s\/4_hana | 101 | cpe:2.3:a:sap:s\/4_hana:101:*:*:*:*:*:*:* |
sap | s\/4_hana | 102 | cpe:2.3:a:sap:s\/4_hana:102:*:*:*:*:*:*:* |
[
{
"product": "SAP NetWeaver AS ABAP (SAP Landscape Transformation)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 2011_1_620"
},
{
"status": "affected",
"version": "< 2011_1_640"
},
{
"status": "affected",
"version": "< 2011_1_700"
},
{
"status": "affected",
"version": "< 2011_1_710"
},
{
"status": "affected",
"version": "< 2011_1_730"
},
{
"status": "affected",
"version": "< 2011_1_731"
},
{
"status": "affected",
"version": "< 2011_1_752"
},
{
"status": "affected",
"version": "< 2020"
}
]
},
{
"product": "SAP S4 HANA (SAP Landscape Transformation)",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 101"
},
{
"status": "affected",
"version": "< 102"
},
{
"status": "affected",
"version": "< 103"
},
{
"status": "affected",
"version": "< 104"
},
{
"status": "affected",
"version": "< 105"
}
]
}
]
More
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:P/I:N/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
86.6%