Vulnerability Intelligence Report
Memory Corruption vulnerability in SAP Web Dispatcher
CVE-2023-35871
The SAP Web Dispatcher - versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.89, WEBDISP 7.91, WEBDISP 7.92, WEBDISP 7.93, KERNEL 7.53, KERNEL 7.54 KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KRNL64UC 7.53, HDB 2.00, XS_ADVANCED_RUNTIME 1.00, SAP_EXTENDED_APP_SERVICES 1, has a vulnerability that can be exploited by an unauthenticated attacker to cause memory corruption through logical errors in memory management this may leads to information disclosure or system crashes, which can have low impact on confidentiality and high impact on the integrity and availability of the system.
No Active Exploit Signals
CVSS Base Score
7.7
HIGH
Exploitability:2.3
Impact Score:5.5
EPSS Probability:0.50%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-787 ↗CWE-787 Out-of-bounds Write
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| SAP_SE | SAP Web Dispatcher | WEBDISP 7.53 (affected), WEBDISP 7.54 (affected), WEBDISP 7.77 (affected), WEBDISP 7.85 (affected), WEBDISP 7.89 (affected), WEBDISP 7.91 (affected), WEBDISP 7.92 (affected), WEBDISP 7.93 (affected), KERNEL 7.53 (affected), KERNEL 7.54 KERNEL 7.77 (affected), KERNEL 7.85 (affected), KERNEL 7.89 (affected), KERNEL 7.91 (affected), KERNEL 7.92 (affected), KERNEL 7.93 (affected), KRNL64UC 7.53 (affected), HDB 2.00 (affected), XS_ADVANCED_RUNTIME 1.00 (affected), SAP_EXTENDED_APP_SERVICES 1 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.504%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | SAP SE · Vendor · Germany |
| Reserved | 2023-06-19T10:27:44 |
| Published | 2023-07-11T02:41:03 |
| Last Updated | 2024-10-23T16:25:51 |
Community Chatter & Buzz