CVE-2023-42477

published 2023-10-10

CVE-2023-42477: SAP NetWeaver AS Java (GRMG Heartbeat application) - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing…

medium 6.5 CVSS 3.1

AV N AC L PR N UI N S U C L I L A N

SAP NetWeaver AS Java (GRMG Heartbeat application) - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing limited impact on confidentiality and integrity of the application.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	netweaver_application_server_java	—	—
sap_se	sap_netweaver_as_java	—	—

CWE-918