Medium severity4.5NVD Advisory· Published Jul 11, 2023· Updated Jun 17, 2026

CVE-2023-33992

Description

The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW 740, SAP_BW 730, SAP_BW 750, DW4CORE 100, DW4CORE 200, DW4CORE 300, may expose unauthorized cell values to the data response. To be able to exploit this, the user still needs authorizations on the query as well as on the keyfigure/measure level. The missing check only affects the data level.

Affected products

SAP/Business Warehouse4 versions
cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*
- cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*
SAP/Bw\/4hana3 versions
cpe:2.3:a:sap:bw\/4hana:100:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sap:bw\/4hana:100:*:*:*:*:*:*:*
- cpe:2.3:a:sap:bw\/4hana:200:*:*:*:*:*:*:*
- cpe:2.3:a:sap:bw\/4hana:300:*:*:*:*:*:*:*
SAP/SAP BW BICS communication layerllm-create
SAP/SAP Business Warehousellm-create
SAP/SAP BW/4HANAllm-fuzzy
SAP/Netweaver Business Warehousecpe-rescue
Range: SAP_BW 730

Patches

Vulnerability mechanics

References

www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlnvdVendor Advisory
me.sap.com/notes/3088078nvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.293
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000