CVE-2024-42377

Summary

SAP shared service framework allows an authenticated non-administrative user to call a remote-enabled function, which will allow them to insert value entries into a non-sensitive table, causing low impact on integrity of the application

Affected Software

VendorProductVersion RangeStatus
SAP_SESAP Shared Service FrameworkSAP_BS_FND 702affected
SAP_SESAP Shared Service Framework731affected
SAP_SESAP Shared Service Framework746affected
SAP_SESAP Shared Service Framework747affected
SAP_SESAP Shared Service Framework748affected

Weaknesses

  • CWE-862: CWE-862: Missing Authorization

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References