VYPR
← All advisories
Medium severity6.0NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026

CVE-2023-27897

CVE-2023-27897

Description

In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution authorization can use a vulnerable interface to execute an application function to perform actions which they would not normally be permitted to perform. Depending on the function executed, the attack can can have limited impact on confidentiality and integrity of non-critical user or application data and application availability.

Affected products

7
  • SAP/Customer Relationship Management5 versions
    cpe:2.3:a:sap:customer_relationship_management:700:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:customer_relationship_management:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:customer_relationship_management:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:customer_relationship_management:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:customer_relationship_management:712:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:customer_relationship_management:713:*:*:*:*:*:*:*
  • SAP/CRMllm-fuzzy2 versions
    700, 701, 702, 712, 713+ 1 more
    • (no CPE)range: 700, 701, 702, 712, 713
    • (no CPE)range: 700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.