Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-29185 EUVD-2023-32786GHSA-c9w5-v8r2-gv7f

Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)

Published Apr 11, 2023 · Updated Feb 7, 2025 · Assigned by sap

Description

SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters in certain circumstances which can consume the server's resources sufficiently to make it unavailable over the network without any user interaction.

Affected products

VendorProductAffectedFixed
SAP NetWeaver AS for ABAP (Business Server Pages) 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757 —

Advisories 1

References