Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-28122
HistoryApr 17, 2023 - 12:00 a.m.

SAP NetWeaver Application Server Access Control Error Vulnerability

2023-04-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
sap
netweaver
application server
vulnerability
access control

0.001 Low

EPSS

Percentile

30.0%

SAP NetWeaver AS is a SAP Web Application Server from SAP Germany. It not only provides network services, but also is the basic platform for SAP software. An access control error vulnerability exists in SAP NetWeaver AS version 7.50, which stems from the fact that no authentication checks are performed for functions that require a user’s identity. An attacker could exploit this vulnerability to cause unauthorized operations.

0.001 Low

EPSS

Percentile

30.0%

Related for CNVD-2023-28122