VDB
CNVD-2024-23330
CNVD-2024-23330
PUBLISHED
CVSS 6.099999904632568 MEDIUM
SAP NetWeaver AS是德国思爱普（SAP）公司的一款SAP网络应用服务器。它不仅能提供网络服务，且还是SAP软件的基本平台。 SAP NetWeaver AS for ABAP and ABAP Platform存在输入验证错误漏洞。攻击者可利用该漏洞将用户重定向到恶意站点，从而读取或修改信息或使用户遭受网络钓鱼攻击。
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP | NetWeaver AS for ABAP and ABAP Platform | 740, 751, 752 |
Exploit Intelligence
Timeline
- Mar 1, 2023 CVE ID Reserved
- May 20, 2024 CVE Published