CVE-2023-32114

lowpriority · track · 11EPSS 0.006 · 48 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.60% (48th) EPSS

CVSS 2.7 · low

Is it mine?

34 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin privileges to maliciously run a benchmark program repeatedly in intent to slowdown or make the server unavailable which may lead to a limited impact on Availability with No impact on Confidentiality and Integrity of the application.

cvss

Technical severity, 0–10. One row per scoring source.

2.7

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.12.7lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Lprimary · NVD / NIST USexploitability 1.2 · impact 1.4

v3.12.7lowAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Lsecondary · FSTEC (BDU) RU

v3.12.7lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Lsecondary · ENISA EU

v3.12.7lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Lsecondary · cna@sap.comexploitability 1.2 · impact 1.4

v3.12.5lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-400USCWE-732US

affected products (34)

Products and version ranges known to be affected.

SAP Softwareall versionscert_bundDEcpe:/a:sap:sap:-
SAP_SE SAP NetWeaver (Change and Transport System)≤ 750enisa_euvdEU
SAP_SE SAP NetWeaver (Change and Transport System)≤ 731enisa_euvdEU
SAP_SE SAP NetWeaver (Change and Transport System)≤ 752enisa_euvdEU
SAP_SE SAP NetWeaver (Change and Transport System)≤ 754enisa_euvdEU
SAP_SE SAP NetWeaver (Change and Transport System)≤ 753enisa_euvdEU
SAP_SE SAP NetWeaver (Change and Transport System)≤ 751enisa_euvdEU
SAP_SE SAP NetWeaver (Change and Transport System)≤ 755enisa_euvdEU
SAP_SE SAP NetWeaver (Change and Transport System)≤ 740enisa_euvdEU
SAP_SE SAP NetWeaver (Change and Transport System)≤ 757enisa_euvdEU
SAP_SE SAP NetWeaver (Change and Transport System)≤ 702enisa_euvdEU
SAP_SE SAP NetWeaver (Change and Transport System)≤ 756enisa_euvdEU
SAP SAP NetWeaver≤ 757fstec_bduRU
SAP SAP NetWeaver≤ 756fstec_bduRU
SAP SAP NetWeaver≤ 755fstec_bduRU
SAP SAP NetWeaver≤ 754fstec_bduRU
SAP SAP NetWeaver≤ 753fstec_bduRU
SAP SAP NetWeaver≤ 752fstec_bduRU
SAP SAP NetWeaver≤ 751fstec_bduRU
SAP SAP NetWeaver≤ 750fstec_bduRU

showing 20 of 34

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2023-1437SAP Patchday Juni 2023Deutsch2023-06-12csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund NVD CVE.org MITRE

published 2023-06-13modified 2026-06-17

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan