CVE-2023-25618CWE-400

Denial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Medium · published March 14, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in an unused class for error handling in which an attacker authenticated as a non-administrative user can craft a request with certain parameters which will consume the server's resources sufficiently to make it unavailable. There is no ability to view or modify any information.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00613 · 48.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-03-14T04:51Z
EPSS history
Timeline
  • 14 MAR 04:51Z
    Denial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
    cvelistv5