cbcvebase.
CVE-2023-49584
published 2023-12-12

CVE-2023-49584: SAP Fiori launchpad - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, UI_700 200, SAP_BASIS 793, allows an attacker to use…

PriorityP421medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.48%
38.0th percentile
SAP Fiori launchpad - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, UI_700 200, SAP_BASIS 793, allows an attacker to use HTTP verb POST on read-only service causing low impact on Confidentiality of the application.

Affected

17 ranges
VendorProductVersion rangeFixed in
sapfiori_launchpad
sapfiori_launchpad
sapfiori_launchpad
sapfiori_launchpad
sapfiori_launchpad
sapfiori_launchpad
sapfiori_launchpad
sapfiori_launchpad
sapfiori_launchpad
sap_sesap_fiori_launchpad
sap_sesap_fiori_launchpad
sap_sesap_fiori_launchpad
sap_sesap_fiori_launchpad
sap_sesap_fiori_launchpad
sap_sesap_fiori_launchpad
sap_sesap_fiori_launchpad
sap_sesap_fiori_launchpad
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.