Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-28761

Missing Authentication check in SAP NetWeaver Enterprise Portal

Description

In SAP NetWeaver Enterprise Portal - version 7.50, an unauthenticated attacker can attach to an open interface and make use of an open API to access a service which will enable them to access or modify server settings and data, leading to limited impact on confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP NetWeaver Enterprise Portal

Default version status: unaffected

  • 7.50affected

References