CVE-2023-49584: SAP Fiori Launchpad

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

SAP Fiori launchpad - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, UI_700 200, SAP_BASIS 793, allows an attacker to use HTTP verb POST on read-only service causing low impact on Confidentiality of the application.

Affected products

  • SAP Fiori Launchpad: version 200 only; version 700 only; version 750 only; version 754 only; version 755 only; version 756 only; …

Published 2023-12-12. Last modified 2026-06-17.