CVE-2024-54197CWE-918

Server-Side Request Forgery in SAP NetWeaver Administrator (System Overview)

High · published December 10, 2024

CVSS v3.1
7.2
EPSS
0%
Percentile
18.5
In the wild
Unconfirmed
What it is

SAP NetWeaver Administrator(System Overview) allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in Server-Side Request Forgery (SSRF) which could have a low impact on integrity and confidentiality of data. It has no impact on availability of the application.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00272 · 18.5th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-12-10T00:12Z
EPSS history
Timeline
  • 10 DEC 00:12Z
    Server-Side Request Forgery in SAP NetWeaver Administrator (System Overview)
    cvelistv5