CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-41732

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to craft a URL link that could bypass allowlist controls. Depending on the web applications provided by this server, the attacker might inject CSS code or links into the web application that could allow the attacker to read or modify information. There is no impact on availability of application.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 33.4%

CVSS Severity

CVSS v3 Score 4.7

References

Products affected by CVE-2024-41732

Sap » Netweaver Application Server Abap » Version: 755

cpe:2.3:a:sap:netweaver_application_server_abap:755
Sap » Netweaver Application Server Abap » Version: 756

cpe:2.3:a:sap:netweaver_application_server_abap:756
Sap » Netweaver Application Server Abap » Version: 757

cpe:2.3:a:sap:netweaver_application_server_abap:757
Sap » Netweaver Application Server Abap » Version: 758

cpe:2.3:a:sap:netweaver_application_server_abap:758
Sap » Netweaver Application Server Abap » Version: sap_basis_700

cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_700
Sap » Netweaver Application Server Abap » Version: sap_basis_701

cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_701
Sap » Netweaver Application Server Abap » Version: sap_basis_702

cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_702
Sap » Netweaver Application Server Abap » Version: sap_basis_731

cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_731
Sap » Netweaver Application Server Abap » Version: sap_basis_912

cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_912
Sap » Netweaver Application Server Abap » Version: sap_ui_754

cpe:2.3:a:sap:netweaver_application_server_abap:sap_ui_754

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-41732

Products

Pricing

Contact Us