CVE-2003-1035
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does.
Scoring
- CVSS base score
- 0.01
- EPSS probability
- 0.36%
- Published
- 2004-03-16
- Last modified
- 2026-03-16
Affected products
- n/a n/a