Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2023-29111

Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)

Description

The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP Application Interface Framework (ODATA service)

Default version status: unaffected

  • 755affected
  • 756affected

References