SAP for Oil & Gas

807

SINGLE_NUMBER 1 CVE

805

SINGLE_NUMBER 1 CVE

618

SINGLE_NUMBER 1 CVE

603

SINGLE_NUMBER 1 CVE

802

SINGLE_NUMBER 1 CVE

803

SINGLE_NUMBER 1 CVE

804

SINGLE_NUMBER 1 CVE

600

SINGLE_NUMBER 1 CVE

800

SINGLE_NUMBER 1 CVE

602

SINGLE_NUMBER 1 CVE

605

SINGLE_NUMBER 1 CVE

806

SINGLE_NUMBER 1 CVE

617

SINGLE_NUMBER 1 CVE

604

SINGLE_NUMBER 1 CVE

606

SINGLE_NUMBER 1 CVE

CVE-2024-44112

Due to missing authorization check in SAP for Oil & Gas (Transportation and Distribution), an attacker authenticated as a non-administrative user could call a remote-enabled function which will allow them to delete non-sensitive entries in a user data table. There is no effect on confidentiality or availability.

MEDIUM Sep 10, 2024