CVE-2024-39598CWE-918

[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)

Medium · published July 9, 2024

CVSS v3.1
5.0
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

SAP CRM (WebClient UI Framework) allows an

authenticated attacker to enumerate accessible HTTP endpoints in the internal

network by specially crafting HTTP requests. On successful exploitation this

can result in information disclosure. It has no impact on integrity and

availability of the application.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-07-09T04:04Z
EPSS history
Timeline
  • 09 JUL 04:04Z
    [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)
    cvelistv5