Lucene search

[email protected]CVE-2023-1903

HistoryApr 11, 2023 - 3:15 a.m.

CVE-2023-1903

2023-04-1103:15:07

CWE-862

[email protected]

web.nvd.nist.gov

cve-2023-1903

sap

hcm

fiori app

my forms

fiori 2.0

version 605

authorization

vulnerability

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

29.6%

JSON

SAP HCM Fiori App My Forms (Fiori 2.0) - version 605, does not perform necessary authorization checks for an authenticated user exposing the restricted header data.

Affected configurations

NVD

Node

saphcm_fiori_app_my_formsMatch605

VendorProductVersionCPE
saphcm_fiori_app_my_forms605cpe:/a:sap:hcm_fiori_app_my_forms:605:::

Vendor	Product	Version	CPE
sap	hcm_fiori_app_my_forms	605	cpe:/a:sap:hcm_fiori_app_my_forms:605:::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HCM Fiori App My Forms (Fiori 2.0)",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "605"
      }
    ]
  }
]

References

launchpad.support.sap.com/#/notes/3301457

www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

29.6%

JSON

Related for CVE-2023-1903

cvelist1 prion1 nvd1