CVE-2023-25614: XSS
SAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allow an unauthenticated attacker to inject the code that can be executed by the application over the network. On successful exploitation it can gain access to the sensitive information which leads to a limited impact on the confidentiality and the integrity of the application.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this SAP NetWeaver AS ABAP (BSP Framework) application vulnerability?
The vulnerability ID for this SAP NetWeaver AS ABAP (BSP Framework) application vulnerability is CVE-2023-25614.
What is the severity level of CVE-2023-25614?
The severity level of CVE-2023-25614 is medium.
Which versions of SAP NetWeaver AS ABAP (BSP Framework) application are affected by CVE-2023-25614?
The versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, and 757 of SAP NetWeaver AS ABAP (BSP Framework) application are affected by CVE-2023-25614.
How can an unauthenticated attacker exploit CVE-2023-25614?
An unauthenticated attacker can exploit CVE-2023-25614 by injecting code that can be executed by the application over the network.
Are there any fixes or patches available for CVE-2023-25614?
Yes, you can find fixes or patches for CVE-2023-25614 at the following references: [link1](https://launchpad.support.sap.com/#/notes/3274585) and [link2](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).