Vulnerability Details CVE-2024-37171
SAP Transportation Management (Collaboration
Portal) allows an attacker with non-administrative privileges to send a crafted
request from a vulnerable web application. This will trigger the application
handler to send a request to an unintended service, which may reveal
information about that service. The information obtained could be used to
target internal systems behind firewalls that are normally inaccessible to an
attacker from the external network, resulting in a Server-Side Request Forgery
vulnerability. There is no effect on integrity or availability of the
application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.2%
CVSS Severity
CVSS v3 Score 5.0
References
Products affected by CVE-2024-37171
-
cpe:2.3:a:sap:saptmui:140
-
cpe:2.3:a:sap:saptmui:150
-
cpe:2.3:a:sap:saptmui:160
-
cpe:2.3:a:sap:saptmui:170
-
cpe:2.3:a:sap:transportation_management:-