Vulnerabilities fixed in SAP products

🗓️ 14 Mar 2023 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 5 Views

Updates fix XSS, DoS, circumvention, and remote code execution across SAP products.

Reporter	Title	Published	Views	Family All 260
BDU FSTEC	The vulnerability of the SAP NetWeaver AS for Java software platform, related to deficiencies in authentication procedures, allows attackers to gain read, modify, or delete access to data, or to cause service interruptions.	17 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Central Management Console (CMC) of the SAP Business Objects Business Intelligence Platform allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.	17 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Central Management Console (CMC) of the SAP Business Objects Business Intelligence Platform allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.	17 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP integration platforms lies in incorrect restrictions on path names to restricted catalogs, allowing attackers to overwrite arbitrary files.	17 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SAPRSBRO component in SAP NetWeaver AS ABAP and SAP NetWeaver ABAP software integration platforms allows attackers to re-record arbitrary files.	17 Mar 202300:00	–	bdu_fstec
Circl	CVE-2023-0021	27 Feb 202518:26	–	circl
Circl	CVE-2023-23857	14 Mar 202312:54	–	circl
Circl	CVE-2023-24526	14 Mar 202312:54	–	circl
Circl	CVE-2023-25615	14 Mar 202312:54	–	circl
Circl	CVE-2023-25616	14 Mar 202312:54	–	circl

14 Mar 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.6 - 9.9

EPSS0.05126

SSVC

Enterprise Resource Planning Netweaver Business Objects Solution Manager Cross Site Scripting Denial of Service Security circumvention Remote code execution Data access System data access