CVE-2023-23854

State: Published
Severity: 3.8 Low
Published: Feb 14, 2023
Updated: Mar 19, 2025
Reserved: Jan 19, 2023

Description

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Scores

CVSS	Score	Vector	Source
3.1	3.8 Low	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L	sap

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
NetWeaver AS ABAP and ABAP PlatformSAP	700Affected 701Affected 702Affected 731Affected 740Affected 750Affected 751Affected 752Affected

References

https://launchpad.support.sap.com/#/notes/3287291
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.