Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-42477

Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)

Description

SAP NetWeaver AS Java (GRMG Heartbeat application) - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing limited impact on confidentiality and integrity of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver AS Java

Default version status: unaffected

  • 7.50affected

References