Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-27270

Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform

Description

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in a class for test purposes in which an attacker authenticated as a non-administrative user can craft a request with certain parameters, which will consume the server's resources sufficiently to make it unavailable. There is no ability to view or modify any information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP NetWeaver Application Server for ABAP and ABAP Platform

Default version status: unaffected

  • 700affected
  • 701affected
  • 702affected
  • 731affected
  • 740affected
  • 750affected
  • 751affected
  • 752affected
  • 753affected
  • 754affected
  • 755affected
  • 756affected
  • 757affected
  • 791affected

References