CVE-2023-41366: fallo de gravedad media en SAP_SE SAP NetWeaver Application Server ABAP…
Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
Publicada el · Actualizada el
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 0.6%
probabilidad de explotación
0.6%top 54% de las CVE
explotación observada
noninguna fuente lo reporta
Under certain condition SAP NetWeaver Application Server ABAP - versions KERNEL 722, KERNEL 7.53, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KERNEL 7.94, KERNEL64UC 7.22, KERNEL64UC 7.22EXT, KERNEL64UC 7.53, KERNEL64NUC 7.22, KERNEL64NUC 7.22EXT, allows an unauthenticated attacker to access the unintended data due to the lack of restrictions applied which may lead to low impact in confidentiality and no impact on the integrity and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Productos afectados
SAP_SE · SAP NetWeaver Application Server ABAP and ABAP PlatformCVEs relacionadas — SAP_SE SAP NetWeaver Application Server ABAP…
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-58236MEDIUMOS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP PlatformEPSS 0.7%CVE-2024-33006CRITICALFile upload vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformEPSS 0.5%CVE-2023-49581MEDIUMSQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformEPSS 0.5%CVE-2024-32733MEDIUMCross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformEPSS 0.4%CVE-2026-0509CRITICALMissing Authorization check in SAP NetWeaver Application Server ABAP and ABAP PlatformEPSS 0.4%CVE-2025-31329MEDIUMInformation Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformEPSS 0.3%