Логотип exploitDog
bind:CVE-2024-24743
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-24743

Количество 3

Количество 3

nvd логотип

CVE-2024-24743

почти 2 года назад

SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so that availability is not affected.

CVSS3: 8.6
EPSS: Низкий
github логотип

GHSA-8r2m-wqj6-fr2r

почти 2 года назад

SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so that availability is not affected.

CVSS3: 8.6
EPSS: Низкий
fstec логотип

BDU:2024-05018

почти 2 года назад

Уязвимость компонента Guided Procedures программного средства создания и развертывания веб-приложений SAP NetWeaver AS for Java, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации

CVSS3: 8.6
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-24743

SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so that availability is not affected.

CVSS3: 8.6
0%
Низкий
почти 2 года назад
github логотип
GHSA-8r2m-wqj6-fr2r

SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious request with a crafted XML file over the network, which when parsed will enable him to access sensitive files and data but not modify them. There are expansion limits in place so that availability is not affected.

CVSS3: 8.6
0%
Низкий
почти 2 года назад
fstec логотип
BDU:2024-05018

Уязвимость компонента Guided Procedures программного средства создания и развертывания веб-приложений SAP NetWeaver AS for Java, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации

CVSS3: 8.6
0%
Низкий
почти 2 года назад

Уязвимостей на страницу