7.4
CVSSv3

CVE-2023-35874

Published: 11/07/2023 Updated: 19/07/2023
CVSS v3 Base Score: 7.4 | Impact Score: 3.7 | Exploitability Score: 3.1
VMScore: 0

Vulnerability Summary

SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KERNEL 7.22, KERNEL, 7.53, KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.92, KERNEL 7.93, under some conditions, performs improper authentication checks for functionalities that require user identity. An attacker can perform malicious actions over the network, extending the scope of impact, causing a limited impact on confidentiality, integrity and availability.

Vulnerable Product Search on Vulmon Subscribe to Product

sap netweaver application server abap krnl64uc_7.53

sap netweaver application server abap kernel_7.53

sap netweaver application server abap kernel_7.77

sap netweaver application server abap kernel_7.81

sap netweaver application server abap krnl64nuc_7.22

sap netweaver application server abap krnl64nuc_7.22ext

sap netweaver application server abap kernel_7.22

sap netweaver application server abap krnl64uc_7.22

sap netweaver application server abap krnl64uc_7.22ext

sap netweaver application server abap kernel_7.85

sap netweaver application server abap kernel_7.89

sap netweaver application server abap kernel_7.54

sap netweaver application server abap kernel_7.92

sap netweaver application server abap kernel_7.93