← CVE Intelligence

CVE-2024-39598

[Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) PUBLISHED

Description (CNA)

SAP CRM (WebClient UI Framework) allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP CRM WebClient UIaffected S4FND 102; affected S4FND 103; affected S4FND 104; affected S4FND 105; affected S4FND 106; affected S4FND 107; affected S4FND 108; affected WEBCUIF 701; affected WEBCUIF 731; affected WEBCUIF 746; affected WEBCUIF 747; affected WEBCUIF 748; affected WEBCUIF 800; affected WEBCUIF 801

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.