CVE-2023-36922 - Vulnerability Details

Vendors	Products
Sap	Netweaver

Link	Providers
https://me.sap.com/notes/3350297
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-36922", "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "state": "PUBLISHED", "assignerShortName": "sap", "dateReserved": "2023-06-27T21:23:26.299Z", "datePublished": "2023-07-11T02:56:55.299Z", "dateUpdated": "2024-08-02T17:01:09.981Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "SAP ECC and SAP S/4HANA (IS-OIL)", "vendor": "SAP_SE", "versions": [{"status": "affected", "version": "IS-OIL 600"}, {"status": "affected", "version": "IS-OIL 602"}, {"status": "affected", "version": "IS-OIL 603"}, {"status": "affected", "version": "IS-OIL 604"}, {"status": "affected", "version": "IS-OIL 605"}, {"status": "affected", "version": "IS-OIL 606"}, {"status": "affected", "version": "IS-OIL 617"}, {"status": "affected", "version": "IS-OIL 618"}, {"status": "affected", "version": "IS-OIL 800"}, {"status": "affected", "version": "IS-OIL 802"}, {"status": "affected", "version": "IS-OIL 803"}, {"status": "affected", "version": "IS-OIL 804"}, {"status": "affected", "version": "IS-OIL 805"}, {"status": "affected", "version": "IS-OIL 806"}, {"status": "affected", "version": "IS-OIL 807"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p><span style=\"background-color: rgb(255, 255, 255);\">Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension. &nbsp;On successful exploitation, the attacker can read or modify the system data as well as shut down the system.</span></p>"}], "value": "Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension. \u00a0On successful exploitation, the attacker can read or modify the system data as well as shut down the system.\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "lang": "eng", "type": "CWE"}]}], "providerMetadata": {"orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "shortName": "sap", "dateUpdated": "2023-12-09T16:39:50.007Z"}, "references": [{"url": "https://me.sap.com/notes/3350297"}, {"url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"}], "source": {"discovery": "UNKNOWN"}, "title": "OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL)", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:01:09.981Z"}, "title": "CVE Program Container", "references": [{"url": "https://me.sap.com/notes/3350297", "tags": ["x_transferred"]}, {"url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-36922 (string)

assignerOrgId : e4686d1a-f260-4930-ac4c-2f5c992778dd (string)

state : PUBLISHED (string)

assignerShortName : sap (string)

dateReserved : 2023-06-27T21:23:26.299Z (string)

datePublished : 2023-07-11T02:56:55.299Z (string)

dateUpdated : 2024-08-02T17:01:09.981Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : SAP ECC and SAP S/4HANA (IS-OIL) (string)

vendor : SAP_SE (string)

versions : [ »

0 : { »

status : affected (string)

version : IS-OIL 600 (string)

}

1 : { »

status : affected (string)

version : IS-OIL 602 (string)

}

2 : { »

status : affected (string)

version : IS-OIL 603 (string)

}

3 : { »

status : affected (string)

version : IS-OIL 604 (string)

}

4 : { »

status : affected (string)

version : IS-OIL 605 (string)

}

5 : { »

status : affected (string)

version : IS-OIL 606 (string)

}

6 : { »

status : affected (string)

version : IS-OIL 617 (string)

}

7 : { »

status : affected (string)

version : IS-OIL 618 (string)

}

8 : { »

status : affected (string)

version : IS-OIL 800 (string)

}

9 : { »

status : affected (string)

version : IS-OIL 802 (string)

}

10 : { »

status : affected (string)

version : IS-OIL 803 (string)

}

11 : { »

status : affected (string)

version : IS-OIL 804 (string)

}

12 : { »

status : affected (string)

version : IS-OIL 805 (string)

}

13 : { »

status : affected (string)

version : IS-OIL 806 (string)

}

14 : { »

status : affected (string)

version : IS-OIL 807 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : <p><span style="background-color: rgb(255, 255, 255);">Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension.  On successful exploitation, the attacker can read or modify the system data as well as shut down the system.</span></p> (string)

}

]

value : Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension. On successful exploitation, the attacker can read or modify the system data as well as shut down the system. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.1 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-78 (string)

description : CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (string)

lang : eng (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : e4686d1a-f260-4930-ac4c-2f5c992778dd (string)

shortName : sap (string)

dateUpdated : 2023-12-09T16:39:50.007Z (string)

}

references : [ »

0 : { »

url : https://me.sap.com/notes/3350297 (string)

}

1 : { »

url : https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL) (string)

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T17:01:09.981Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://me.sap.com/notes/3350297 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sap:netweaver:600:*:*:*:*:*:*:*", "matchCriteriaId": "BDC771C8-70C7-4EA4-BF13-9153175F652F", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:602:*:*:*:*:*:*:*", "matchCriteriaId": "D95174DD-6513-469F-911D-61FEF490BF44", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:603:*:*:*:*:*:*:*", "matchCriteriaId": "A78F0A5A-514B-49C6-82E1-788049D4624A", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:604:*:*:*:*:*:*:*", "matchCriteriaId": "92CF95AB-7222-4BB9-A01B-CC9BB0548DBE", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:605:*:*:*:*:*:*:*", "matchCriteriaId": "8941EEEA-F588-419D-A72C-177A669D450B", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:606:*:*:*:*:*:*:*", "matchCriteriaId": "94616B3E-ADE0-45E2-A3B8-B545E7E0BB0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:617:*:*:*:*:*:*:*", "matchCriteriaId": "345E8B05-AE80-401D-895D-918136E5D738", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:618:*:*:*:*:*:*:*", "matchCriteriaId": "6B5038E3-5515-41C5-8C89-D839D5AE60DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:800:*:*:*:*:*:*:*", "matchCriteriaId": "4BE09533-102E-492F-ACAE-5B959885EE45", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:802:*:*:*:*:*:*:*", "matchCriteriaId": "70FA0AC8-D377-4800-9365-2EAD15C108C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:803:*:*:*:*:*:*:*", "matchCriteriaId": "364A7BFE-3EAE-4897-B198-BEE1DCEB2163", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:804:*:*:*:*:*:*:*", "matchCriteriaId": "2A119858-00D2-44CA-9C9D-9BEAFC8BD3CD", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:805:*:*:*:*:*:*:*", "matchCriteriaId": "5781D666-9439-4D4D-A0F6-DDA6763439CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:806:*:*:*:*:*:*:*", "matchCriteriaId": "19188AD7-2B5F-48E9-81B2-30A60F009432", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:netweaver:807:*:*:*:*:*:*:*", "matchCriteriaId": "5C4EDC18-FBD1-473C-82F8-940097CE8C1C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension. \u00a0On successful exploitation, the attacker can read or modify the system data as well as shut down the system.\n\n"}], "id": "CVE-2023-36922", "lastModified": "2024-11-21T08:10:55.903", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 6.0, "source": "cna@sap.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-07-11T03:15:10.357", "references": [{"source": "cna@sap.com", "tags": ["Permissions Required"], "url": "https://me.sap.com/notes/3350297"}, {"source": "cna@sap.com", "tags": ["Vendor Advisory"], "url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "https://me.sap.com/notes/3350297"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"}], "sourceIdentifier": "cna@sap.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "cna@sap.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:sap:netweaver:600:*:*:*:*:*:*:* (string)

matchCriteriaId : BDC771C8-70C7-4EA4-BF13-9153175F652F (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:sap:netweaver:602:*:*:*:*:*:*:* (string)

matchCriteriaId : D95174DD-6513-469F-911D-61FEF490BF44 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:sap:netweaver:603:*:*:*:*:*:*:* (string)

matchCriteriaId : A78F0A5A-514B-49C6-82E1-788049D4624A (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:sap:netweaver:604:*:*:*:*:*:*:* (string)

matchCriteriaId : 92CF95AB-7222-4BB9-A01B-CC9BB0548DBE (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:sap:netweaver:605:*:*:*:*:*:*:* (string)

matchCriteriaId : 8941EEEA-F588-419D-A72C-177A669D450B (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:sap:netweaver:606:*:*:*:*:*:*:* (string)

matchCriteriaId : 94616B3E-ADE0-45E2-A3B8-B545E7E0BB0F (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:sap:netweaver:617:*:*:*:*:*:*:* (string)

matchCriteriaId : 345E8B05-AE80-401D-895D-918136E5D738 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:sap:netweaver:618:*:*:*:*:*:*:* (string)

matchCriteriaId : 6B5038E3-5515-41C5-8C89-D839D5AE60DF (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:sap:netweaver:800:*:*:*:*:*:*:* (string)

matchCriteriaId : 4BE09533-102E-492F-ACAE-5B959885EE45 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:sap:netweaver:802:*:*:*:*:*:*:* (string)

matchCriteriaId : 70FA0AC8-D377-4800-9365-2EAD15C108C9 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:sap:netweaver:803:*:*:*:*:*:*:* (string)

matchCriteriaId : 364A7BFE-3EAE-4897-B198-BEE1DCEB2163 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:sap:netweaver:804:*:*:*:*:*:*:* (string)

matchCriteriaId : 2A119858-00D2-44CA-9C9D-9BEAFC8BD3CD (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:sap:netweaver:805:*:*:*:*:*:*:* (string)

matchCriteriaId : 5781D666-9439-4D4D-A0F6-DDA6763439CE (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:sap:netweaver:806:*:*:*:*:*:*:* (string)

matchCriteriaId : 19188AD7-2B5F-48E9-81B2-30A60F009432 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:sap:netweaver:807:*:*:*:*:*:*:* (string)

matchCriteriaId : 5C4EDC18-FBD1-473C-82F8-940097CE8C1C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension. On successful exploitation, the attacker can read or modify the system data as well as shut down the system. (string)

}

]

id : CVE-2023-36922 (string)

lastModified : 2024-11-21T08:10:55.903 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.1 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 6 (number)

source : cna@sap.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-07-11T03:15:10.357 (string)

references : [ »

0 : { »

source : cna@sap.com (string)

tags : [ »

0 : Permissions Required (string)

]

url : https://me.sap.com/notes/3350297 (string)

}

1 : { »

source : cna@sap.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Permissions Required (string)

]

url : https://me.sap.com/notes/3350297 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html (string)

}

]

sourceIdentifier : cna@sap.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-78 (string)

}

]

source : cna@sap.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-78 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object