Lucene search
HistoryDec 12, 2023 - 2:15 a.m.
CVE-2023-49578
sap cloud connector
vulnerability
version 2.0
low-privileged user
denial of service
dos attack
adjacent ui
malicious request
low impact
availability
confidentiality
CVSS3
3.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS
0
Percentile
9.0%
SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application.
Affected configurations
Node
sapcloud_connectorMatch2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sap | cloud_connector | 2.0 | cpe:2.3:a:sap:cloud_connector:2.0:*:*:*:*:*:*:* |
Related
cnvd
cnvd
SAP Cloud Connector Resource Management Error Vulnerability
2023-12-14 00:00:00
cve
cve
CVE-2023-49578
2023-12-12 02:15:07
prion
prion
Design/Logic Flaw
2023-12-12 02:15:00
cvelist
cvelist
CVE-2023-49578 Denial of service (DOS) in SAP Cloud Connector
2023-12-12 01:08:32
CVSS3
3.5
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2023-49578