VYPR
← All advisories
Medium severity4.1NVD Advisory· Published Dec 12, 2023· Updated Jun 17, 2026

CVE-2023-49581

CVE-2023-49581

Description

SAP GUI for Windows and SAP GUI for Java allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the unauthenticated attacker to write data to a database table. By doing so the attacker could increase response times of the AS ABAP, leading to mild impact on availability.

Affected products

7
  • SAP/NetWeaver Application Server for ABAP4 versions
    cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:sap_basis:*:*:*+ 3 more
    • cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:sap_basis:*:*:*
    • cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:sap_basis:*:*:*
  • SAP/Gui For Windowsllm-fuzzy
  • SAP/GUI for Javallm-fuzzy
  • SAP/Sap Netweaver And Abap Platformcpe-rescue
    Range: SAP_BASIS 700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.