CVE-2023-32115

low-risk

Published 2023-06-13

An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.

Do I need to act?

0.20% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.2/10 Medium

LOCAL / HIGH complexity

Affected Products (7)

Master Data Synchronization

Affected Vendors

Sap

References (4)

Permissions Required https://launchpad.support.sap.com/#/notes/1794761

Vendor Advisory https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Permissions Required https://launchpad.support.sap.com/#/notes/1794761

Vendor Advisory https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

/ 100

low-risk

Severity 11/34 · Low

Exploitability 1/34 · Minimal

Exposure 14/34 · Moderate