VULNERABILITY INTELLIGENCE

CVE-2024-39591

CVSS score4.3 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2024-08-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.

Weakness classification

  • cna@sap.com: CWE-862

Primary references