VULNERABILITY INTELLIGENCE

CVE-2024-37175

CVSS score4.3 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2024-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to access some sensitive information.

Weakness classification

  • cna@sap.com: CWE-862

Primary references