Логотип exploitDog
bind:CVE-2025-23186
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-23186

Количество 3

Количество 3

nvd логотип

CVE-2025-23186

10 месяцев назад

In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be further exploited to completely compromise the remote service, potentially resulting in a significant impact on the confidentiality, integrity, and availability of the application.

CVSS3: 8.5
EPSS: Низкий
github логотип

GHSA-frxv-q4xc-g6pg

10 месяцев назад

In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be further exploited to completely compromise the remote service, potentially resulting in a significant impact on the confidentiality, integrity, and availability of the application.

CVSS3: 8.5
EPSS: Низкий
fstec логотип

BDU:2025-06364

10 месяцев назад

Уязвимость сервера программной интеграционной платформы SAP NetWeaver Application ABAP, связанная с неверным управлением генерацией кода, позволяющая нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 8.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-23186

In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be further exploited to completely compromise the remote service, potentially resulting in a significant impact on the confidentiality, integrity, and availability of the application.

CVSS3: 8.5
0%
Низкий
10 месяцев назад
github логотип
GHSA-frxv-q4xc-g6pg

In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be further exploited to completely compromise the remote service, potentially resulting in a significant impact on the confidentiality, integrity, and availability of the application.

CVSS3: 8.5
0%
Низкий
10 месяцев назад
fstec логотип
BDU:2025-06364

Уязвимость сервера программной интеграционной платформы SAP NetWeaver Application ABAP, связанная с неверным управлением генерацией кода, позволяющая нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 8.5
0%
Низкий
10 месяцев назад

Уязвимостей на страницу