[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiL9h7Cw_QXXIjIstpKAwu8nhkv49PXAlbIwnnCZ5LbU":3,"g5a-risk:CVE-2023-23857":108},{"success":4,"data":5,"meta":105},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":58,"weaknesses":59,"weaknessesCount":47,"isActivelyExploited":68,"cisaInfo":26,"otxData":26,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":103,"notableEvents":104},"CVE-2023-23857","What is CVE-2023-23857?","Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and services across systems. On a successful exploitation, the attacker can read and modify some sensitive information but can also be used to lock up any element or operation of the system making that it unresponsive or unavailable.","Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use...","2023-03-14T05:15:29.227","2023-04-11T22:15:07.997",8.6,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,4.7,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":37},"cna@sap.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":34,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:H","CHANGED",9.9,"CRITICAL",5.3,0.00544,[38,38,38,38,38,38,38],"High",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"sap","netweaver_application_server_for_java","7.50","cpe:2.3:a:sap:netweaver_application_server_for_java:7.50:*:*:*:*:*:*:*",1,[49,54],{"url":50,"source":51,"tags":52},"https:\u002F\u002Flaunchpad.support.sap.com\u002F#\u002Fnotes\u002F3252433","Sap",[53],"Permissions Required",{"url":55,"source":51,"tags":56},"https:\u002F\u002Fwww.sap.com\u002Fdocuments\u002F2022\u002F02\u002Ffa865ea4-167e-0010-bca6-c68f7e60039b.html",[57],"Vendor Advisory",2,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2023-23857? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-23857, a high severity cyber security vulnerability from 2023. Due to missing authentication check, SAP NetWeaver AS for J...","CVE-2023-23857, CVE-2023-23857 vulnerability, CVE-2023-23857 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, sap security, netweaver_application_server_for_java vulnerability","\u002Fwhat-is\u002Fcve-2023-23857",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-23857","Cybersecurity","CVE-2023-23857, CVE-2023-23857 vulnerability, CVE-2023-23857 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":26,"Negate":26,"Nodes":97},[98],{"Operator":99,"Negate":26,"CPEMatch":100},"OR",[101],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":102,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D7A80232-F2C2-4B40-A00C-25611D3409AC",[],[],{"lastModified":11,"cacheTime":106,"version":107},1792360141704,"2.0",{"score":109,"band":110,"action":111,"scoredAt":112},54,"Medium","Plan remediation","2026-10-16T06:57:25.854885+00:00"]