VULNERABILITY INTELLIGENCE
CVE-2024-24739
CVSS score6.3 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2024-02-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
SAP Bank Account Management (BAM) allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application.
Weakness classification
- cna@sap.com: CWE-862
Primary references
- cna@sap.com — Permissions Required
- cna@sap.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory