Vulnerability Details CVE-2023-29111
The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.9%
CVSS Severity
CVSS v3 Score 3.1
References
Products affected by CVE-2023-29111
-
cpe:2.3:a:sap:application_interface_framework:755
-
cpe:2.3:a:sap:application_interface_framework:756