Lucene search

[email protected]CVE-2023-0013

HistoryJan 10, 2023 - 3:15 a.m.

CVE-2023-0013

2023-01-1003:15:10

CWE-79

[email protected]

web.nvd.nist.gov

sap

netweaver

abap

xss

vulnerability

nvd

security

cve-2023-0013

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

32.6%

JSON

The ABAP Keyword Documentation of SAP NetWeaver Application Server - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, for ABAP and ABAP Platform does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.

Affected configurations

NVD

Node

sapnetweaver_application_server_abapMatch702

sapnetweaver_application_server_abapMatch731

sapnetweaver_application_server_abapMatch740

sapnetweaver_application_server_abapMatch750

sapnetweaver_application_server_abapMatch751

sapnetweaver_application_server_abapMatch752

sapnetweaver_application_server_abapMatch753

sapnetweaver_application_server_abapMatch754

sapnetweaver_application_server_abapMatch755

sapnetweaver_application_server_abapMatch756

sapnetweaver_application_server_abapMatch757

CPENameOperatorVersion
sap:netweaver_application_server_abapsap netweaver application server abapeq702
sap:netweaver_application_server_abapsap netweaver application server abapeq731
sap:netweaver_application_server_abapsap netweaver application server abapeq740
sap:netweaver_application_server_abapsap netweaver application server abapeq750
sap:netweaver_application_server_abapsap netweaver application server abapeq751
sap:netweaver_application_server_abapsap netweaver application server abapeq752
sap:netweaver_application_server_abapsap netweaver application server abapeq753
sap:netweaver_application_server_abapsap netweaver application server abapeq754
sap:netweaver_application_server_abapsap netweaver application server abapeq755
sap:netweaver_application_server_abapsap netweaver application server abapeq756

CPE	Name	Operator	Version
sap:netweaver_application_server_abap	sap netweaver application server abap	eq	702
sap:netweaver_application_server_abap	sap netweaver application server abap	eq	731
sap:netweaver_application_server_abap	sap netweaver application server abap	eq	740
sap:netweaver_application_server_abap	sap netweaver application server abap	eq	750
sap:netweaver_application_server_abap	sap netweaver application server abap	eq	751
sap:netweaver_application_server_abap	sap netweaver application server abap	eq	752
sap:netweaver_application_server_abap	sap netweaver application server abap	eq	753
sap:netweaver_application_server_abap	sap netweaver application server abap	eq	754
sap:netweaver_application_server_abap	sap netweaver application server abap	eq	755
sap:netweaver_application_server_abap	sap netweaver application server abap	eq	756

Rows per page:

1-10 of 111

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NetWeaver AS for ABAP and ABAP Platform",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "702"
      },
      {
        "status": "affected",
        "version": "731"
      },
      {
        "status": "affected",
        "version": "740"
      },
      {
        "status": "affected",
        "version": "750"
      },
      {
        "status": "affected",
        "version": "751"
      },
      {
        "status": "affected",
        "version": "752"
      },
      {
        "status": "affected",
        "version": "753"
      },
      {
        "status": "affected",
        "version": "754"
      },
      {
        "status": "affected",
        "version": "755"
      },
      {
        "status": "affected",
        "version": "756"
      },
      {
        "status": "affected",
        "version": "757"
      }
    ]
  }
]