CVE-2023-33987

Summary

CVE-2023-33987 is a vulnerability affecting various versions of SAP Web Dispatcher and related components, including WEBDISP 7.49 to 7.90, KERNEL 7.49 to 7.90, KRNL64NUC 7.49, KRNL64UC 7.49 and 7.53, HDB 2.00, XS_ADVANCED_RUNTIME 1.00, and SAP_EXTENDED_APP_SERVICES 1. An unauthenticated attacker can exploit this weakness by submitting maliciously crafted requests over a network to a front-end server. Over several attempts, the back-end server may become unable to distinguish between malicious and legitimate messages, potentially leading to the execution of a malicious payload. This vulnerability could result in the unauthorized reading or modification of information on the server or temporary server unavailability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.