CVE-2023-29108CWE-923

IP filter vulnerability in ABAP Platform and SAP Web Dispatcher

Medium · published April 11, 2023

CVSS v3.1
5.0
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend applications from unwanted sources.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.1th percentile
Weakness
CWE-923 · Improper Restriction of Communication Channel to Intended Endpoints
Published
2023-04-11T02:56Z
EPSS history
Timeline
  • 11 APR 02:56Z
    IP filter vulnerability in ABAP Platform and SAP Web Dispatcher
    cvelistv5