CVE-2023-28763

2023-04-1103:15:07

CWE-400

[email protected]

web.nvd.nist.gov

cve-2023-28763

abap platform

server resources

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.1%

JSON

SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters which can consume the server’s resources sufficiently to make it unavailable over the network without any user interaction.

Affected configurations

Nvd

Node

sapnetweaver_application_server_abapMatch740

sapnetweaver_application_server_abapMatch750

sapnetweaver_application_server_abapMatch751

sapnetweaver_application_server_abapMatch752

sapnetweaver_application_server_abapMatch753

sapnetweaver_application_server_abapMatch754

sapnetweaver_application_server_abapMatch755

sapnetweaver_application_server_abapMatch756

sapnetweaver_application_server_abapMatch757

sapnetweaver_application_server_abapMatch791

VendorProductVersionCPE
sapnetweaver_application_server_abap740cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*
sapnetweaver_application_server_abap750cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*
sapnetweaver_application_server_abap751cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*
sapnetweaver_application_server_abap752cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*
sapnetweaver_application_server_abap753cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*
sapnetweaver_application_server_abap754cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*
sapnetweaver_application_server_abap755cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*
sapnetweaver_application_server_abap756cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*
sapnetweaver_application_server_abap757cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*
sapnetweaver_application_server_abap791cpe:2.3:a:sap:netweaver_application_server_abap:791:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sap	netweaver_application_server_abap	740	cpe:2.3:a:sap:netweaver_application_server_abap:740:::::::*
sap	netweaver_application_server_abap	750	cpe:2.3:a:sap:netweaver_application_server_abap:750:::::::*
sap	netweaver_application_server_abap	751	cpe:2.3:a:sap:netweaver_application_server_abap:751:::::::*
sap	netweaver_application_server_abap	752	cpe:2.3:a:sap:netweaver_application_server_abap:752:::::::*
sap	netweaver_application_server_abap	753	cpe:2.3:a:sap:netweaver_application_server_abap:753:::::::*
sap	netweaver_application_server_abap	754	cpe:2.3:a:sap:netweaver_application_server_abap:754:::::::*
sap	netweaver_application_server_abap	755	cpe:2.3:a:sap:netweaver_application_server_abap:755:::::::*
sap	netweaver_application_server_abap	756	cpe:2.3:a:sap:netweaver_application_server_abap:756:::::::*
sap	netweaver_application_server_abap	757	cpe:2.3:a:sap:netweaver_application_server_abap:757:::::::*
sap	netweaver_application_server_abap	791	cpe:2.3:a:sap:netweaver_application_server_abap:791:::::::*