CVE-2024-39599

2024-07-0905:15:12

CWE-693

[email protected]

web.nvd.nist.gov

sap netweaver

application server

abap platform

protection mechanism failure

malware scanner

developer bypass

programming error

confidentiality

integrity

availability

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

EPSS

Percentile

9.2%

JSON

Due to a Protection Mechanism Failure in SAP
NetWeaver Application Server for ABAP and ABAP Platform, a developer can bypass
the configured malware scanner API because of a programming error. This leads
to a low impact on the application’s confidentiality, integrity, and
availability.