CVE-2023-33987
CVSS 3.1 Score 9.4 of 10 (high)
Details
Summary
CVE-2023-33987 is a vulnerability affecting various versions of SAP Web Dispatcher and related components, including WEBDISP 7.49 to 7.90, KERNEL 7.49 to 7.90, KRNL64NUC 7.49, KRNL64UC 7.49 and 7.53, HDB 2.00, XS_ADVANCED_RUNTIME 1.00, and SAP_EXTENDED_APP_SERVICES 1. An unauthenticated attacker can exploit this weakness by submitting maliciously crafted requests over a network to a front-end server. Over several attempts, the back-end server may become unable to distinguish between malicious and legitimate messages, potentially leading to the execution of a malicious payload. This vulnerability could result in the unauthorized reading or modification of information on the server or temporary server unavailability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SAP Web Dispatcher
Affected Vendors
- SAP SE
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions