CVE-2023-28761

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Enterprise Portal version 7.50

Description An unauthenticated attacker can attach to an open interface and make use of an open API to access a service, enabling them to access or modify server settings and data. This leads to limited impact on confidentiality and integrity.

Recommendations For SAP NetWeaver Enterprise Portal version 7.50, consider restricting access to the open API and interface to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the access to server settings and data to authorized personnel only.