SAP Note 3318850
Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform
MediumCVSS 6.0SAP NetWeaver AS ABAP / ABAP Platform
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2023-35874
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected products and versions
- Product SAP NetWeaver AS ABAP and ABAP Platform
Versions: KRNL64NUC 722, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KERNEL 7.22, KERNEL 7.53, KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.92, KERNEL 7.93
Appears in
Patch Days listing this note, newest first.
- July 2023MediumCVSS 6.0