Description
In SAP NetWeaver Enterprise Portal - version 7.50, an unauthenticated attacker can attach to an open interface and make use of an open API to access a service which will enable them to access or modify server settings and data, leading to limited impact on confidentiality and integrity.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP | NetWeaver Enterprise Portal | 7.50 | — |
Advisories 1
- WID-SEC-2023-0904 SAP Patchday April 2023 BSI CERT-Bund (WID) · Apr 10, 2023