Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2024-0597 11 CVEs

SAP Security Patch Day – März 2024

Published Mar 11, 2024 · Updated Mar 11, 2024 · de-DE

Vendor: SAP Product: Software Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting (XSS)-Angriffe durchzuführen.

Product

SAP stellt unternehmensweite Lösungen für Geschäftsprozesse wie Buchführung, Vertrieb, Einkauf und Lagerhaltung zur Verfügung.

Vulnerabilities 11

  • High 7.5
    CVE-2023-44487 Exploited Public exploit EPSS 100%

    HTTP/2 Stream Cancellation Attack

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

    nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
    KEV Oct 10, 2023
  • Critical 9.8
    CVE-2023-50164 Public exploit EPSS 81%

    Apache Struts: File upload component had a directory traversal vulnerability

    An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or …

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
  • Critical 9.1
    CVE-2019-10744 Public exploit

    Prototype Pollution in lodash

    Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

    snyk lodash js-jquery lodash Debian Azure Linux npm RubyGems
  • Critical 9.1
    CVE-2024-22127 Public exploit

    Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)

    SAP NetWeaver Administrator AS Java (Administrator Log Viewer plug-in) - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands…

    SAP SAP NetWeaver AS Java (Administrator Log Viewer plug-in)
  • High 8.8
    CVE-2023-39439

    SAP Commerce accepts empty passphrases.

    SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.

    SAP SAP Commerce
  • Medium 5.4
    CVE-2024-27902

    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP applications based on SAPGUI for HTML (WebGUI)

    Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. A successful attack can allow a malicious attacker to access and m…

    SAP SAP NetWeaver AS ABAP applications based on SAPGUI for HTML (WebGUI)
  • Medium 5.3
    CVE-2024-25644

    Information Disclosure vulnerability in NetWeaver (WSRM)

    Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.

    SAP NetWeaver (WSRM)
  • Medium 5.3
    CVE-2024-25645

    Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal)

    Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of …

    SAP SAP NetWeaver Enterprise Portal
  • Medium 5.3
    CVE-2024-28163

    Information Disclosure vulnerability in SAP NetWeaver Process Integration (Support Web Pages)

    Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration (PI) - versions 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availabi…

    SAP SAP NetWeaver Process Integration (Support Web Pages)
  • Medium 4.6
    CVE-2024-22133

    Improper Access Control in SAP Fiori Front End Server

    SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity wit…

    SAP SAP Fiori Front End Server
  • Medium 4.3
    CVE-2024-27900

    Missing Authorization check in SAP ABAP Platform

    Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.

    SAP SAP ABAP Platform

Revision history

  1. #1

    Initiale Fassung

References