// For flags

CVE-2024-44112

Missing Authorization check in SAP for Oil & Gas (Transportation and Distribution)

Severity Score

4.3
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track
*SSVC
Descriptions

Due to missing authorization check in SAP for Oil & Gas (Transportation and Distribution), an attacker authenticated as a non-administrative user could call a remote-enabled function which will allow them to delete non-sensitive entries in a user data table. There is no effect on confidentiality or availability.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:Track
Exploitation
None
Automatable
No
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2024-08-20 CVE Reserved
  • 2024-09-10 CVE Published
  • 2024-09-10 CVE Updated
  • 2024-09-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-862: Missing Authorization
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
600
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "600"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
602
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "602"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
603
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "603"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
604
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "604"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
605
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "605"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
606
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "606"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
617
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "617"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
618
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "618"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
800
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "800"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
802
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "802"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
803
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "803"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
804
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "804"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
805
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "805"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
806
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "806"
en
Affected
SAP SE
Search vendor "SAP SE"
SAP For Oil & Gas
Search vendor "SAP SE" for product "SAP For Oil & Gas"
807
Search vendor "SAP SE" for product "SAP For Oil & Gas" and version "807"
en
Affected