Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-99031
HistoryDec 14, 2023 - 12:00 a.m.

SAP Cloud Connector Resource Management Error Vulnerability

2023-12-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
sap
cloud connector
resource management
error
vulnerability
denial of service
dos
attack
low-privileged
attacker
uncontrolled resource consumption
application

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

SAP Cloud Connector is a tool from SAP Germany to establish a secure connection between local systems and SAP Cloud Platform. A resource management error vulnerability exists in SAP Cloud Connector version 2.0, which stems from the presence of uncontrolled resource consumption in the application and can be exploited by a low-privileged attacker to perform a denial-of-service (DOS) attack from an adjacent UI by sending a malicious request.

CPENameOperatorVersion
sap cloud connectoreq2.0

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CNVD-2023-99031