Lucene search
SapCVELIST:CVE-2023-23859HistoryFeb 14, 2023 - 3:15 a.m.
CVE-2023-23859
2023-02-1403:15:54
CWE-79
sap
www.cve.org
6
sap
netweaver
abap
platform
unauthorized
link
attack
sensitive information
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
35.8%
SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "NetWeaver AS for ABAP and ABAP Platform",
"vendor": "SAP",
"versions": [
{
"status": "affected",
"version": "740"
},
{
"status": "affected",
"version": "750"
},
{
"status": "affected",
"version": "751"
},
{
"status": "affected",
"version": "752"
},
{
"status": "affected",
"version": "753"
},
{
"status": "affected",
"version": "754"
},
{
"status": "affected",
"version": "755"
},
{
"status": "affected",
"version": "756"
},
{
"status": "affected",
"version": "757"
},
{
"status": "affected",
"version": "789"
},
{
"status": "affected",
"version": "790"
}
]
}
]Related
prion
prion
Information disclosure
2023-02-14 04:15:00
cve
cve
CVE-2023-23859
2023-02-14 04:15:12
cnvd
cnvd
SAP NetWeaver AS Cross-Site Scripting Vulnerability (CNVD-2023-40170)
2023-03-01 00:00:00
nvd
nvd
CVE-2023-23859
2023-02-14 04:15:12
nessus
nessus
SAP NetWeaver AS ABAP Multiple Vulnerabilities (3268959)
2023-09-15 00:00:00
SAP NetWeaver AS ABAP Multiple Vulnerabilities (Feb 2023)
2023-02-15 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
35.8%
Related for CVELIST:CVE-2023-23859