Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8r2m-wqj6-fr2r

Опубликовано: 13 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so that availability is not affected.

SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so that availability is not affected.

EPSS

Процентиль: 54%
0.00312
Низкий

8.6 High

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 8.6
nvd
почти 2 года назад

SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so that availability is not affected.

CVSS3: 8.6
fstec
почти 2 года назад

Уязвимость компонента Guided Procedures программного средства создания и развертывания веб-приложений SAP NetWeaver AS for Java, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации

EPSS

Процентиль: 54%
0.00312
Низкий

8.6 High

CVSS3

Дефекты

CWE-611