SAP Note 3269151
Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated user to alter the c…
MediumCVSS 6.1NetWeaver AS ABAP
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2023-24521
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products and versions
- Product NetWeaver AS ABAP (BSP Framework)
Versions: 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757
Appears in
Patch Days listing this note, newest first.
- February 2023MediumCVSS 6.1