Lucene search

K
nvd[email protected]NVD:CVE-2024-22125
HistoryJan 09, 2024 - 2:15 a.m.

CVE-2024-22125

2024-01-0902:15:46
CWE-497
web.nvd.nist.gov
4
cve-2024-22125
sap gui connector
confidentiality
information security

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

37.2%

Under certain conditions the Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge) - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality.

Affected configurations

Nvd
Node
sapgui_connectorMatch1.0edge
VendorProductVersionCPE
sapgui_connector1.0cpe:2.3:a:sap:gui_connector:1.0:*:*:*:*:edge:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

37.2%

Related for NVD:CVE-2024-22125