Lucene search
+L

4 matches found

NVD
NVD
added 2024/02/13 3:15 a.m.33 views

CVE-2024-24743

SAP NetWeaver AS Java CAF - Guided Procedures - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so...

8.6CVSS8.5AI score0.00516EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/02/13 2:43 a.m.40 views

CVE-2024-24743 XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)

SAP NetWeaver AS Java CAF - Guided Procedures - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so...

8.6CVSS8.7AI score0.00516EPSS
Exploits0References2
CVE
CVE
added 2024/02/13 2:43 a.m.71 views

CVE-2024-24743

SAP NetWeaver AS Java (CAF - Guided Procedures) 7.50 is affected by an unauthenticated XXE-type vulnerability triggered by submitting a crafted XML over the network. The issue allows an attacker to access sensitive files and data without modifying them; availability is not affected per the CVE en...

8.6CVSS8.4AI score0.00516EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/13 2:43 a.m.25 views

CVE-2024-24743 XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)

SAP NetWeaver AS Java CAF - Guided Procedures - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so...

8.6CVSS6.8AI score0.00516EPSS
Exploits0References2
Rows per page
Query Builder