cvedb.io
CVE-2023-25618
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2023-03-14T05:15:29.967 · Last modified 2026-06-17T05:41:37.663

Summary

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in an unused class for error handling in which an attacker authenticated as a non-administrative user can craft a request with certain parameters which will consume the server's resources sufficiently to make it unavailable. There is no ability to view or modify any information.

Affected products

sap — netweaver_application_server_abap

Does this affect you?

Add your gear to cvedb and we'll alert you only when sap ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.