CVSS: 3.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-42425
https://notcve.org/view.php?id=CVE-2024-42425
A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. • https://www.dell.com/support/kbdoc/en-us/000227015/dsa-2024-328 • CWE-788: Access of Memory Location After End of Buffer •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-42424
https://notcve.org/view.php?id=CVE-2024-42424
A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. • https://www.dell.com/support/kbdoc/en-us/000227014/dsa-2024-327 • CWE-20: Improper Input Validation •
CVSS: 6.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-45283 – Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)
https://notcve.org/view.php?id=CVE-2024-45283
After successful exploitation, an attacker can read the sensitive information but cannot modify or delete the data. • https://me.sap.com/notes/3477359 https://url.sap/sapsecuritypatchday • CWE-256: Plaintext Storage of a Password •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-44121 – Information Disclosure in SAP S/4 HANA (Statutory Reports)
https://notcve.org/view.php?id=CVE-2024-44121
The vulnerability could expose internal user data that should remain confidential. • https://me.sap.com/notes/3437585 https://url.sap/sapsecuritypatchday • CWE-213: Exposure of Sensitive Information Due to Incompatible Policies •
CVSS: 4.3EPSS: 0%CPEs: -EXPL: 0CVE-2024-44113 – Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer)
https://notcve.org/view.php?id=CVE-2024-44113
Due to missing authorization checks, SAP Business Warehouse (BEx Analyzer) allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the application. • https://me.sap.com/notes/3481992 https://url.sap/sapsecuritypatchday • CWE-359: Exposure of Private Personal Information to an Unauthorized Actor CWE-862: Missing Authorization •