Lucene search
HistoryMar 12, 2024 - 1:15 a.m.
CVE-2024-25644
sap
netweaver
wsrm
vulnerability
2024-25644
information access
confidentiality
low impact
integrity
availability
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.4
Confidence
High
EPSS
0
Percentile
9.0%
Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.
Related
cve
cve
CVE-2024-25644
2024-03-12 01:15:49
prion
prion
Authentication flaw
2024-03-12 01:15:00
cvelist
cvelist
CVE-2024-25644 Information Disclosure vulnerability in NetWeaver (WSRM)
2024-03-12 00:33:44
vulnrichment
vulnrichment
CVE-2024-25644 Information Disclosure vulnerability in NetWeaver (WSRM)
2024-03-12 00:33:44
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.4
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-25644