Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-28164

SAP NetWeaver AS Java (CAF - Guided Procedures) allows an unauthenticated user to access non-sensitive information about the server which would otherwise be restricted causing low impact on confidentiality of the application.

Published

2024-06-11T03:15:09.953

Last Modified

2024-11-21T09:05:56.460

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses

Type: Secondary
CWE-200
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sap	netweaver_application_server_java	gp-core_7.5	Yes

References

https://me.sap.com/notes/3425571 Permissions Required ([email protected])
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html Vendor Advisory ([email protected])
https://me.sap.com/notes/3425571 Permissions Required (af854a3a-2127-422b-91ae-364da2661108)
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)