CVE-2024-41737 — Server-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Management)

CVE-2024-41737

Server-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Management) PUBLISHED

Description (CNA)

SAP CRM ABAP (Insights Management) allows an authenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP CRM ABAP (Insights Management)	affected BBPCRM 700; affected 701; affected 702; affected 712; affected 713; affected 714

CWE

CWE-918

References

https://me.sap.com/notes/3487537
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.