Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-100011
HistorySep 20, 2023 - 12:00 a.m.

SAP NetWeaver Access Control Error Vulnerability

2023-09-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
sap
netweaver
vulnerability
access control
error
webdynpro
authentication
unauthorized attacker
administrator's view.

7.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

SAP NetWeaver is the German SAP (SAP) company’s set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. An Access Control Error vulnerability exists in SAP NetWeaver version 7.50, which stems from a lack of authentication checks in the webdynpro application, and can be exploited by an unauthorized attacker to gain anonymous access to the administrator’s view of a specific function.

CPENameOperatorVersion
sap netweavereq7.50

7.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for CNVD-2023-100011