Approved changes feed: RSS · Atom

cpe:2.3:a:sap:host_agent_service:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductHost Agent Service (f70d495a-9352-55fb-b0e4-2a3271247369)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-24523 vulnerable 2026-06-08 05:56:05.846049 Details available
HIGH (8.8)
An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start Service) - versions 7.21, 7.22, can submit a crafted ConfigureOutsideDiscovery request with an operating system command which will be executed with administrator privileges.  The OS command can read or modify any user or system data and can make the system unavailable.
Published: 2023-02-14T03:17:37.098Z
Updated: 2024-08-02T10:56:04.370Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.