// For flags

CVE-2023-27500

Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

Severity Score

8.1
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track*
*SSVC
Descriptions

An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no data can be read but potentially critical OS files can be over-written making the system unavailable.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:Track*
Exploitation
None
Automatable
No
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2023-03-02 CVE Reserved
  • 2023-03-14 CVE Published
  • 2024-08-02 CVE Updated
  • 2024-10-04 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
700
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "700"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
701
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "701"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
702
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "702"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
731
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "731"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
740
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "740"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
750
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "750"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
751
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "751"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
752
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "752"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
753
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "753"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
754
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "754"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
755
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "755"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
756
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "756"
-
Affected
Sap
Search vendor "Sap"
Netweaver Application Server Abap
Search vendor "Sap" for product "Netweaver Application Server Abap"
757
Search vendor "Sap" for product "Netweaver Application Server Abap" and version "757"
-
Affected