CVE-2024-45285
Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
Severity Score
5.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
The RFC enabled function module allows a low privileged user to perform denial of service on any user and also change or delete favourite nodes. By sending a crafted packet in the function module targeting specific parameters, the specific targeted user will no longer have access to any functionality of SAP GUI. There is low impact on integrity and availability of the application.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-08-26 CVE Reserved
- 2024-09-10 CVE Published
- 2024-09-10 CVE Updated
- 2024-09-11 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-862: Missing Authorization
CAPEC
References (2)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 700 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "700" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 701 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "701" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 702 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "702" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 731 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "731" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 740 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "740" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 750 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "750" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 751 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "751" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 752 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "752" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 753 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "753" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 754 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "754" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 755 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "755" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 756 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "756" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 757 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "757" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 758 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "758" | en |
Affected
| ||||||
| SAP SE Search vendor "SAP SE" | SAP NetWeaver Application Server For ABAP And ABAP Platform Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" | 912 Search vendor "SAP SE" for product "SAP NetWeaver Application Server For ABAP And ABAP Platform" and version "912" | en |
Affected
| ||||||