cbcvebase.
CVE-2024-37180
published 2024-07-09

CVE-2024-37180: Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote-enabled function module with no…

PriorityP428medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.30%
22.2th percentile
Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote-enabled function module with no further authorization which would otherwise be restricted, the function can be used to read non-sensitive information with low impact on confidentiality of the application.

Affected

28 ranges· showing 25
VendorProductVersion rangeFixed in
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
sap_sesap_netweaver_application_server_for_abap_and_abap_platform——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.