CVE-2024-25645

published 2024-03-12

CVE-2024-25645: Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which would otherwise be restricted causing…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of the application.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	netweaver_enterprise_portal	—	—
sap_se	sap_netweaver	—	—

CWE-732 CWE-200