Strix
26.1K

CVE-2024-41734

MEDIUMCVSS 4.3/10EPSS 0.26%

Last modified

CVE-2024-41734 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability.. EPSS estimates a 0.26% chance of exploitation in the next 30 days.

Description

Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability.

Metrics

CVSS 3.1
4.3/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS Probability
0.26%

17.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
SapNetweaver Application Server Abapsap_basis_700
SapNetweaver Application Server Abapsap_basis_701
SapNetweaver Application Server Abapsap_basis_702
SapNetweaver Application Server Abapsap_basis_731
SapNetweaver Application Server Abapsap_basis_740
SapNetweaver Application Server Abapsap_basis_750
SapNetweaver Application Server Abapsap_basis_751
SapNetweaver Application Server Abapsap_basis_752
SapNetweaver Application Server Abapsap_basis_753
SapNetweaver Application Server Abapsap_basis_754
SapNetweaver Application Server Abapsap_basis_755
SapNetweaver Application Server Abapsap_basis_756
SapNetweaver Application Server Abapsap_basis_757
SapNetweaver Application Server Abapsap_basis_758
SapNetweaver Application Server Abapsap_basis_912

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2024-41734?
Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability.
How severe is CVE-2024-41734?
CVE-2024-41734 has a CVSS score of 4.3/10 (MEDIUM severity). The EPSS model estimates a 0.26% probability of exploitation in the next 30 days.
How do I fix CVE-2024-41734?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-41734?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST