CVE-2024-42380
Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
Severity Score
4.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
The RFC enabled function module allows a low privileged user to read any user's workplace favourites and user menu along with all the specific data of each node. Usernames can be enumerated by exploiting vulnerability. There is low impact on confidentiality of the application.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-07-31 CVE Reserved
- 2024-09-10 CVE Published
- 2024-09-10 CVE Updated
- 2024-09-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-862: Missing Authorization
CAPEC
References (2)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 700 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "700" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 701 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "701" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 702 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "702" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 731 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "731" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 740 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "740" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 750 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "750" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 751 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "751" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 752 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "752" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 753 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "753" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 754 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "754" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 755 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "755" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 756 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "756" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 757 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "757" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 758 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "758" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 912 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "912" | en |
Affected
| ||||||