SAP Note 3089413
Capture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CriticalCVSS 9.0NetWeaver ABAP Server and ABAP Platform
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2023-0014
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products and versions
- Product NetWeaver ABAP Server and ABAP Platform
Versions: SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 710, SAP_BASIS 711, SAP_BASIS 730, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, KERNEL 7.22, KERNEL 7.53, KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.89, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT
Appears in
Patch Days listing this note, newest first.
- January 2023CriticalCVSS 9.0