CVE-2024-42376

The CVE concerns SAP Shared Service Framework with a missing authorization check for an authenticated user, enabling privilege escalation. Affected software is SAP Shared Service Framework; the underlying cause is an authorization check omission, leading to high confidentiality impact if exploite...

CVE-2024-42377

CVE-2024-42377 concerns the SAP Shared Service Framework. The connected documents describe that an authenticated non-administrative user can call a remote-enabled function, enabling insertion of value entries into a non-sensitive table and resulting in low integrity impact to the application. The...