5.3

CVE-2024-37180

Under certain conditions SAP NetWeaver
Application Server for ABAP and ABAP Platform allows an attacker to access
remote-enabled function module with no further authorization which would
otherwise be restricted, the function can be used to read non-sensitive
information with low impact on confidentiality of the application.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Sap Basis Version700
SAP ≫ Sap Basis Version701
SAP ≫ Sap Basis Version702
SAP ≫ Sap Basis Version731
SAP ≫ Sap Basis Version740
SAP ≫ Sap Basis Version750
SAP ≫ Sap Basis Version751
SAP ≫ Sap Basis Version752
SAP ≫ Sap Basis Version753
SAP ≫ Sap Basis Version754
SAP ≫ Sap Basis Version755
SAP ≫ Sap Basis Version756
SAP ≫ Sap Basis Version757
SAP ≫ Sap Basis Version758
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.298
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cna@sap.com 4.1 2.3 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://me.sap.com/notes/3454858
Permissions Required