Lucene search
PRIOn knowledge basePRION:CVE-2023-26459HistoryMar 14, 2023 - 5:15 a.m.
Input validation
2023-03-1405:15:00
PRIOn knowledge base
www.prio-n.com
5
input validation
sap
netweaver as
abap platform
versions 700-757
attacker
non-administrative user
application server
arbitrary url
confidentiality
integrity
availability
nvd
0.001 Low
EPSS
Percentile
28.5%
Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker authenticated as a non-administrative user can craft a request which will trigger the application server to send a request to an arbitrary URL which can reveal, modify or make unavailable non-sensitive information, leading to low impact on Confidentiality, Integrity and Availability.
Related
nvd
nvd
CVE-2023-26459
2023-03-14 05:15:30
cvelist
cvelist
cnvd
cnvd
SAP NetWeaver AS Input Validation Error Vulnerability (CNVD-2023-28124)
2023-03-16 00:00:00
cve
cve
CVE-2023-26459
2023-03-14 05:15:30
nessus
nessus
SAP NetWeaver AS ABAP Multiple Vulnerabilities (March 2023)
2023-03-16 00:00:00