Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-31405

Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERCORE 7.50, J2EE-APPS 7.50, allows an unauthenticated attacker to craft a request over the network which can result in unwarranted modifications to a system log without user interaction. There is no ability to view any information or any effect on availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver AS for Java (Log Viewer)

Default version status: unaffected

  • ENGINEAPI 7.50affected
  • SERVERCORE 7.50affected
  • J2EE-APPS 7.50affected

References