CVE-2024-41734

sap netweaver application server abap

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-41734

Katalog CVE

CVSS 4.3 · Medium EPSS 0,26%

Kerentanan Missing Authorization pada sap netweaver application server abap. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability.

Rincian

Terbit di NVD
13 Agustus 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-862: Missing Authorization
EPSS (30 hari)
0,26% peluang dieksploitasi; lebih tinggi dari 16,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
sap netweaver application server abap Versi sap_basis_700
sap netweaver application server abap Versi sap_basis_701
sap netweaver application server abap Versi sap_basis_702
sap netweaver application server abap Versi sap_basis_731
sap netweaver application server abap Versi sap_basis_740
sap netweaver application server abap Versi sap_basis_750
sap netweaver application server abap Versi sap_basis_751
sap netweaver application server abap Versi sap_basis_752
sap netweaver application server abap Versi sap_basis_753
sap netweaver application server abap Versi sap_basis_754
sap netweaver application server abap Versi sap_basis_755
sap netweaver application server abap Versi sap_basis_756
sap netweaver application server abap Versi sap_basis_757
sap netweaver application server abap Versi sap_basis_758
sap netweaver application server abap Versi sap_basis_912

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.