cbcvebase.
CVE-2023-27500
published 2023-03-14

CVE-2023-27500: An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no…

PriorityP346high8.1CVSS 3.1
AVNACLPRLUINSUCNIHAH
EPSS
0.98%
58.3th percentile
An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no data can be read but potentially critical OS files can be over-written making the system unavailable.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_application_server_abap——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
sapnetweaver_as_for_abap_and_abap_platform——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.