Shared Service Framework Security Vulnerabilities

CVE-2024-42376

SAP Shared Service Framework does not perform necessaryauthorization check for an authenticated user, resulting in escalation ofprivileges. On successful exploitation, an attacker can cause a high impact onconfidentiality of the application.

CVE-2024-42377

SAP shared service framework allows anauthenticated non-administrative user to call a remote-enabled function, whichwill allow them to insert value entries into a non-sensitive table, causing lowimpact on integrity of the application