CVE-2023-27270CWE-400

Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform

Medium · published March 14, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in a class for test purposes in which an attacker authenticated as a non-administrative user can craft a request with certain parameters, which will consume the server's resources sufficiently to make it unavailable. There is no ability to view or modify any information.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00613 · 48.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-03-14T04:58Z
EPSS history
Timeline
  • 14 MAR 04:58Z
    Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform
    cvelistv5