Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-25645

Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of the application.

Published

2024-03-12T01:15:49.780

Last Modified

2025-02-07T17:24:54.693

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses

Type: Secondary
CWE-732

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sap	netweaver_enterprise_portal	7.50	Yes

References

https://me.sap.com/notes/3428847 Permissions Required ([email protected])
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 Vendor Advisory ([email protected])
https://me.sap.com/notes/3428847 Permissions Required (af854a3a-2127-422b-91ae-364da2661108)
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)