Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-42377 EUVD-2024-39582GHSA-9gx3-jqv2-vphr

Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework

Published Aug 13, 2024 · Updated Aug 13, 2024 · Assigned by sap

Description

SAP shared service framework allows an
authenticated non-administrative user to call a remote-enabled function, which
will allow them to insert value entries into a non-sensitive table, causing low
impact on integrity of the application

Affected products

VendorProductAffectedFixed
SAP_SE SAP Shared Service Framework SAP_BS_FND 702, 731, 746, 747, 748 —

Advisories 1

References