VULNERABILITY INTELLIGENCE

CVE-2024-39598

CVSS score5 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2024-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Description

SAP CRM (WebClient UI Framework) allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the application.

Weakness classification

  • cna@sap.com: CWE-918

Primary references