CVE-2024-25644

EPSS 0.29%
Published 12.03.2024 01:15:49
Last modified 10.04.2025 19:40:55
Source cna@sap.com
Teams watchlist Login
Open Login

Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

SAP ≫ Netweaver Version7.50

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.29%	0.52

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cna@sap.com	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364

Vendor Advisory

https://me.sap.com/notes/3425682

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2024-25644

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-25644

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-25644

EUVD