CVE-2024-37180

Katalog CVE

CVSS 5.3 · Medium EPSS 0,30%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada sap basis. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote-enabled function module with no further authorization which would otherwise be restricted, the function can be used to read non-sensitive information with low impact on confidentiality of the application.

Rincian

Terbit di NVD

9 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://url.sap/sapsecuritypatchday patch
• https://me.sap.com/notes/3454858 permissions required