cbcvebase.
CVE-2023-29185
published 2023-04-11

CVE-2023-29185: SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated…

PriorityP336medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.57%
43.5th percentile
SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters in certain circumstances which can consume the server's resources sufficiently to make it unavailable over the network without any user interaction.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_abap_business_server_pages——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
sapnetweaver_as_for_abap——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.