CVE-2023-41369
External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application)
Vexday Risk Score
8Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 3.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 sep 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Productos afectados
SAP_SE · SAP S/4HANA (Create Single Payment application)¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →