CVE-2023-49581: SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
SAP GUI for Windows and SAP GUI for Java allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the unauthenticated attacker to write data to a database table. By doing so the attacker could increase response times of the AS ABAP, leading to mild impact on availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49581?
CVE-2023-49581 is considered a critical vulnerability due to its potential to allow unauthenticated access to sensitive information and database manipulation.
How do I fix CVE-2023-49581?
To mitigate CVE-2023-49581, update SAP NetWeaver Application Server for ABAP to the latest version or apply the specific patches provided by SAP.
What types of systems are affected by CVE-2023-49581?
CVE-2023-49581 affects SAP NetWeaver Application Server for ABAP versions 700, 731, 740, and 750.
What can an attacker do with CVE-2023-49581?
An attacker exploiting CVE-2023-49581 can access restricted information and potentially write malicious data to database tables.
Is authentication bypass involved in CVE-2023-49581?
Yes, CVE-2023-49581 involves an unauthenticated attacker gaining access, which highlights the critical security implications of the vulnerability.