CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-34690

SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are typically restricted, causing minimal impact on the confidentiality and integrity of the application.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.0%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2024-34690

Sap » Student Life Cycle Management » Version: 618

cpe:2.3:a:sap:student_life_cycle_management:618
Sap » Student Life Cycle Management » Version: 802

cpe:2.3:a:sap:student_life_cycle_management:802
Sap » Student Life Cycle Management » Version: 803

cpe:2.3:a:sap:student_life_cycle_management:803
Sap » Student Life Cycle Management » Version: 804

cpe:2.3:a:sap:student_life_cycle_management:804
Sap » Student Life Cycle Management » Version: 805

cpe:2.3:a:sap:student_life_cycle_management:805
Sap » Student Life Cycle Management » Version: 806

cpe:2.3:a:sap:student_life_cycle_management:806
Sap » Student Life Cycle Management » Version: 807

cpe:2.3:a:sap:student_life_cycle_management:807
Sap » Student Life Cycle Management » Version: 808

cpe:2.3:a:sap:student_life_cycle_management:808
Sap » Student Life Cycle Management » Version: is-ps-ca_617

cpe:2.3:a:sap:student_life_cycle_management:is-ps-ca_617

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-34690

Products

Pricing

Contact Us