CVE-2024-41732CWE-284

Improper Access Control in SAP Netweaver Application Server ABAP

Medium · published August 13, 2024

CVSS v3.1
4.7
EPSS
0%
Percentile
23.8
In the wild
Unconfirmed
What it is

SAP NetWeaver Application Server ABAP allows

an unauthenticated attacker to craft a URL link that could bypass allowlist

controls. Depending on the web applications provided by this server, the

attacker might inject CSS code or links into the web application that could

allow the attacker to read or modify information. There is no impact on

availability of application.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-08-13T03:58Z
EPSS history
Timeline
  • 13 AUG 03:58Z
    Improper Access Control in SAP Netweaver Application Server ABAP
    cvelistv5