CVE-2024-41737CWE-918

Server-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Management)

Medium · published August 13, 2024

CVSS v3.1
5.0
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

SAP CRM ABAP (Insights

Management) allows an authenticated attacker to enumerate HTTP endpoints in the

internal network by specially crafting HTTP requests. On successful

exploitation this can result in information disclosure. It has no impact on

integrity and availability of the application.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.0th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-08-13T03:55Z
EPSS history
Timeline
  • 13 AUG 03:55Z
    Server-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Management)
    cvelistv5