CVE-2023-29185: Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)
SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated as a non-administrative user to craft a request with certain parameters in certain circumstances which can consume the server's resources sufficiently to make it unavailable over the network without any user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-29185?
The severity of CVE-2023-29185 is medium with a severity value of 6.5.
Which versions of SAP NetWeaver AS for ABAP (Business Server Pages) are affected by CVE-2023-29185?
Versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, and 757 of SAP NetWeaver AS for ABAP (Business Server Pages) are affected by CVE-2023-29185.
What can an attacker do with CVE-2023-29185?
An attacker authenticated as a non-administrative user can craft a request with certain parameters that can consume the server's resources.
How can I fix CVE-2023-29185?
Apply the necessary patches and updates provided by SAP.
Where can I find more information about CVE-2023-29185?
You can find more information about CVE-2023-29185 on the SAP support portal and SAP's official documentation.