CVE-2023-27498 HIGH

CVE-2023-27498: Memory Corruption vulnerability in SAP Host Agent (SAPOSCOL)

Vendor Sap
Product Host Agent (SAPOSCOL)
Weakness CWE-121
Published March 14, 2023
Last update February 27, 2025
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L

What the vulnerability does

01Description

SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any technical information about the server. It can also make a particular service temporarily unavailable

Key dates

02Disclosure timeline

March 14, 2023 CVE published
February 27, 2025 Record updated