CVE-2024-47587
Missing authorization check in SAP Cash Management (Cash Operations)
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 3.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Nov 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Cash Operations does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges causing low impact to confidentiality to the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Affected products
SAP_SE · SAP Cash Management (Cash Operations)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →