Lucene search
HistoryAug 13, 2024 - 4:15 a.m.
CVE-2024-42377
sap
shared service framework
cve-2024-42377
integrity impact
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0
Percentile
14.7%
SAP shared service framework allows an
authenticated non-administrative user to call a remote-enabled function, which
will allow them to insert value entries into a non-sensitive table, causing low
impact on integrity of the application
Affected configurations
Node
sapshared_service_frameworkMatchsap_bs_fnd_702
ORsapshared_service_frameworkMatchsap_bs_fnd_731
ORsapshared_service_frameworkMatchsap_bs_fnd_746
ORsapshared_service_frameworkMatchsap_bs_fnd_747
ORsapshared_service_frameworkMatchsap_bs_fnd_748
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sap | shared_service_framework | sap_bs_fnd_702 | cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_702:*:*:*:*:*:*:* |
| sap | shared_service_framework | sap_bs_fnd_731 | cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_731:*:*:*:*:*:*:* |
| sap | shared_service_framework | sap_bs_fnd_746 | cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_746:*:*:*:*:*:*:* |
| sap | shared_service_framework | sap_bs_fnd_747 | cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_747:*:*:*:*:*:*:* |
| sap | shared_service_framework | sap_bs_fnd_748 | cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_748:*:*:*:*:*:*:* |
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0
Percentile
14.7%
Related for NVD:CVE-2024-42377