Known Vulnerabilities
CVE-2024-42377
SAP shared service framework allows an authenticated non-administrative user to call a remote-enabled function, which will allow them to insert value entries into a non-sensitive table, causing low impact on integrity of the application
MEDIUM
CVSS 4.3
Published Aug 13, 2024
CVE-2024-42376
SAP Shared Service Framework does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. On successful exploitation, an attacker can cause a high impact on confidentiality of the application.
MEDIUM
CVSS 6.5
Published Aug 13, 2024