VYPR
← All advisories
Medium severity5.0NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026

CVE-2023-29108

CVE-2023-29108

Description

The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend applications from unwanted sources.

Affected products

8
  • SAP/Abap Platform Kernel3 versions
    cpe:2.3:a:sap:abap_platform_kernel:7.85:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:abap_platform_kernel:7.85:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform_kernel:7.89:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:abap_platform_kernel:7.91:*:*:*:*:*:*:*
  • SAP/Web Dispatcher3 versions
    cpe:2.3:a:sap:web_dispatcher:7.85:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:web_dispatcher:7.85:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:7.89:*:*:*:*:*:*:*
    • (no CPE)
  • SAP/Abap Platformllm-fuzzy
  • SAP/Sap Netweaver As For Abap And Abap Platformcpe-rescue
    Range: WEBDISP 7.85

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.