CVEvulnerability
CVE-2024-47581
4.3 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2024-12-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-862
Description
SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted.
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://me.sap.com/notes/3522332 me.sap.com
- https://url.sap/sapsecuritypatchday url.sap