What is CVE-2023-27897?

CVE-2023-27897 is a medium-severity vulnerability in Sap Crm, classified under Code Injection. CVSS score: 6.0/10. Published 2023-04-11.

How severe is CVE-2023-27897?

Medium severity. CVSS v3 base score is 6.0 out of 10.

RCE in Sap Crm

CVE-2023-27897

In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution authorization can use a vulnerable interface to execute an application function to perform actions…

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.007 (47.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L.

Affected products

Sap Crm — versions 700, 701, 702
Sap Customer_relationship_management — versions 700, 701, 702

Weakness classification (CWE)

CWE-94 — Code Injection

References

cna@sap.com (Permissions Required)
cna@sap.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-27897?: CVE-2023-27897 is a medium-severity vulnerability in Sap Crm, classified under Code Injection. CVSS score: 6.0/10. Published 2023-04-11.
How severe is CVE-2023-27897?: Medium severity. CVSS v3 base score is 6.0 out of 10.