NetWeaver AS ABAP
自 2023 年 1 月以来共 4 条安全说明。
优先级依据 CVSS 推算，并非 SAP 的优先级：CVSS 9.0 及以上为严重，7.0 及以上为高，4.0 及以上为中，低于 4.0 为低。SAP 自己的优先级仅见于 SAP for Me（需要 SAP 登录）。
| 补丁日 | 编号 | 标题 | 优先级（依据 CVSS 推算，并非 SAP 的优先级） | CVSS |
|---|---|---|---|---|
| 2023年2月 | 3269118 | Due to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, allows an unauthenticated user to alter the current session of the user by in… | 中 | 6.1 |
| 2023年2月 | 3269151 | Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an unauthenticated user to alter the c… | 中 | 6.1 |
| 2023年2月 | 3274585 | SAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allow an unauthenticated attacker to inject the code that can be executed… | 中 | 6.1 |
| 2023年2月 | 3282663 | Due to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75F, 75G, 75H, allow malicious inputs from untrusted sources,… | 中 | 6.1 |