Vulnerabilities (CVE)

Filtered by vendor Sap Subscribe
Filtered by product Shared Service Framework
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-42376 1 Sap 1 Shared Service Framework 2024-09-12 N/A 6.5 MEDIUM
SAP Shared Service Framework does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. On successful exploitation, an attacker can cause a high impact on confidentiality of the application.
CVE-2024-42377 1 Sap 1 Shared Service Framework 2024-09-12 N/A 4.3 MEDIUM
SAP shared service framework allows an authenticated non-administrative user to call a remote-enabled function, which will allow them to insert value entries into a non-sensitive table, causing low impact on integrity of the application