CVE-2023-35874: falha de média gravidade em SAP_SE SAP NetWeaver AS ABAP and ABAP Platform
Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6epss 0.4%
SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KERNEL 7.22, KERNEL, 7.53, KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.92, KERNEL 7.93, under some conditions, performs improper authentication checks for functionalities that require user identity. An attacker can perform malicious actions over the network, extending the scope of impact, causing a limited impact on confidentiality, integrity and availability.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Produtos afetados
SAP_SE · SAP NetWeaver AS ABAP and ABAP PlatformCVEs relacionadas — SAP_SE SAP NetWeaver AS ABAP and ABAP Platform
No mesmo produto, das mais perigosas para as menos.
CVE-2025-0063HIGHSQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformEPSS 0.7%CVE-2024-30218MEDIUMDenial of service (DOS) vulnerability in SAP NetWeaver AS ABAP and ABAP PlatformEPSS 0.5%CVE-2026-23687HIGHXML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP PlatformEPSS 0.5%CVE-2023-37492MEDIUMMissing Authorization check in SAP NetWeaver AS ABAP and ABAP PlatformEPSS 0.5%CVE-2026-27671CRITICALMemory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP PlatformEPSS 0.4%CVE-2026-44748CRITICALXML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP PlatformEPSS 0.2%