5.3

CVE-2024-39591

SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.

Data is provided by the National Vulnerability Database (NVD)
SAP ≫ Document Builder Versions4fnd_102
SAP ≫ Document Builder Versions4fnd_103
SAP ≫ Document Builder Versions4fnd_104
SAP ≫ Document Builder Versions4fnd_105
SAP ≫ Document Builder Versions4fnd_106
SAP ≫ Document Builder Versions4fnd_107
SAP ≫ Document Builder Versions4fnd_108
SAP ≫ Document Builder Versionsap_bs_fnd_702
SAP ≫ Document Builder Versionsap_bs_fnd_731
SAP ≫ Document Builder Versionsap_bs_fnd_746
SAP ≫ Document Builder Versionsap_bs_fnd_747
SAP ≫ Document Builder Versionsap_bs_fnd_748
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.2% 0.424
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cna@sap.com 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://me.sap.com/notes/3477423
Permissions Required