CVE-2023-32114CWE-732

Denial of Service in SAP NetWeaver

Low · published June 13, 2023

CVSS v3.1
2.7
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin privileges to maliciously run a benchmark program repeatedly in intent to slowdown or make the server unavailable which may lead to a limited impact on Availability with No impact on Confidentiality and Integrity of the application.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00596 · 47.8th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2023-06-13T02:38Z
EPSS history
Timeline
  • 13 JUN 02:38Z
    Denial of Service in SAP NetWeaver
    cvelistv5