CVE-2024-33009CWE-89

SQL injection vulnerability in SAP Global Label Management (GLM)

Medium · published May 14, 2024

CVSS v3.1
4.2
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

SAP Global Label Management is vulnerable to SQL injection. On exploitation the attacker can use specially crafted inputs to modify database commands resulting in the retrieval of additional information persisted by the system. This could lead to low impact on Confidentiality and Integrity of the application.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.5th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2024-05-14T03:58Z
EPSS history
Timeline
  • 14 MAY 03:58Z
    SQL injection vulnerability in SAP Global Label Management (GLM)
    cvelistv5