CVE-2024-42371
Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
Severity Score
5.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
The RFC enabled function module allows a low privileged user to delete the workplace favourites of any user. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces and nodes. There is low impact on integrity and availability of the application.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-07-31 CVE Reserved
- 2024-09-10 CVE Published
- 2024-09-10 CVE Updated
- 2024-09-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-862: Missing Authorization
CAPEC
References (2)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 700 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "700" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 701 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "701" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 702 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "702" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 731 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "731" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 740 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "740" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 750 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "750" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 751 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "751" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 752 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "752" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 753 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "753" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 754 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "754" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 755 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "755" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 756 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "756" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 757 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "757" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 758 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "758" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 912 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "912" | en |
Affected
| ||||||