Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-49584

Client-Side Desynchronization vulnerability in SAP Fiori Launchpad

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Fiori launchpad - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, UI_700 200, SAP_BASIS 793, allows an attacker to use HTTP verb POST on read-only service causing low impact on Confidentiality of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Fiori Launchpad

Default version status: unaffected

  • SAP_UI 750affected
  • SAP_UI 754affected
  • SAP_UI 755affected
  • SAP_UI 756affected
  • SAP_UI 757affected
  • SAP_UI 758affected
  • UI_700 200affected
  • SAP_BASIS 793affected

References