CVEvulnerability

CVE-2024-41737

5.0 MEDIUM Published 2024-08-13 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-08-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.0 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.0 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weaknesses
CWE-918

Description

SAP CRM ABAP (Insights Management) allows an authenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the application.

Affected configurations

• sap crm abap insights management bbpcrm 700 • sap crm abap insights management bbpcrm 701 • sap crm abap insights management bbpcrm 702 • sap crm abap insights management bbpcrm 712 • sap crm abap insights management bbpcrm 713 • sap crm abap insights management bbpcrm 714

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References