CVE-2024-45283: SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password when creating an…

PriorityP421medium6CVSS 3.1

AVLACLPRHUINSCCHINAN

EPSS

0.17%

6.7th percentile

SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password when creating an RFC destination. After successful exploitation, an attacker can read the sensitive information but cannot modify or delete the data.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_netweaver_as_for_java	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.