What is CVE-2023-35871?

CVE-2023-35871 is a high-severity vulnerability in Sap Web_dispatcher, classified under Out-of-bounds Write. CVSS score: 7.7/10. Published 2023-07-11.

How severe is CVE-2023-35871?

High severity. CVSS v3 base score is 7.7 out of 10.

Buffer overflow in Sap Web_dispatcher

CVE-2023-35871

The SAP Web Dispatcher - versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.89, WEBDISP 7.91, WEBDISP 7.92, WEBDISP 7.93, KERNEL 7.53, KERNEL 7.54 KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.91, KERNEL 7.92, KER…

Vulnerability class: Buffer Overflow

EPSS: 0.006 (45.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H.

Affected products

Sap Web_dispatcher — versions 7.53, 7.54, 7.77
Sap_se Sap Web Dispatcher — versions WEBDISP 7.53, WEBDISP 7.54, WEBDISP 7.77

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

cna@sap.com (Permissions Required)
cna@sap.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-35871?: CVE-2023-35871 is a high-severity vulnerability in Sap Web_dispatcher, classified under Out-of-bounds Write. CVSS score: 7.7/10. Published 2023-07-11.
How severe is CVE-2023-35871?: High severity. CVSS v3 base score is 7.7 out of 10.