CVE-2023-35874
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform
SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KERNEL 7.22, KERNEL, 7.53, KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.92, KERNEL 7.93, under some conditions, performs improper authentication checks for functionalities that require user identity. An attacker can perform malicious actions over the network, extending the scope of impact, causing a limited impact on confidentiality, integrity and availability.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP NetWeaver AS ABAP and ABAP Platform
- Vendor
- SAP_SE
- Product
- SAP NetWeaver AS ABAP and ABAP Platform
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| KRNL64NUC 722 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KRNL64NUC 7.22EXT | affected | Unavailable | Unavailable | Unavailable | None listed |
| KRNL64UC 7.22 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KRNL64UC 7.22EXT | affected | Unavailable | Unavailable | Unavailable | None listed |
| KRNL64UC 7.53 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KERNEL 7.22 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KERNEL 7.53 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KERNEL 7.77 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KERNEL 7.81 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KERNEL 7.85 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KERNEL 7.89 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KERNEL 7.54 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KERNEL 7.92 | affected | Unavailable | Unavailable | Unavailable | None listed |
| KERNEL 7.93 | affected | Unavailable | Unavailable | Unavailable | None listed |