CVE-2024-21737
Code Injection vulnerability in SAP Application Interface Framework (File Adapter)
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.4EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
09 ene 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through various layers and execute OS commands directly. By this, such user can control the behaviour of the application. This leads to considerable impact on confidentiality, integrity and availability.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Productos afectados
SAP_SE · SAP Application Interface Framework (File Adapter)¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →