Lucene search

K
nvd[email protected]NVD:CVE-2024-37177
HistoryJun 11, 2024 - 2:15 a.m.

CVE-2024-37177

2024-06-1102:15:09
CWE-79
web.nvd.nist.gov
5
sap financial consolidation
untrusted data input
web application
confidentiality
integrity
network exposure
cve-2024-37177
exploitation

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS

0

Percentile

9.0%

SAP Financial Consolidation allows data to enter
a Web application through an untrusted source. These endpoints are exposed over
the network and it allows the user to modify the content from the web site. On
successful exploitation, an attacker can cause significant impact to
confidentiality and integrity of the application.

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-37177