CVE-2024-34690

CVE-2024-34690 affects SAP Student Life Cycle Management (SLcM). The provided documents describe a logic flaw where authenticated users bypass authorization checks, enabling privilege escalation to access and edit non‑sensitive report variants that are normally restricted. The disclosed impact is...

CVE-2024-42373

CVE-2024-42373 describes an authorization issue in SAP Student Life Cycle Management (SLcM). The authenticated-user flow fails to enforce proper access checks, enabling a potential escalation of privileges. According to multiple sources, exploitation could allow an attacker to delete non-critical...