CVE-2024-33009

SQL injection vulnerability in SAP Global Label Management (GLM)

CVSS 4.2 MEDIUMEPSS 0.3%CWE-89

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 4.2EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

14 mai 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

SAP Global Label Management is vulnerable to SQL injection. On exploitation the attacker can use specially crafted inputs to modify database commands resulting in the retrieval of additional information persisted by the system. This could lead to low impact on Confidentiality and Integrity of the application.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Produtos afetados

SAP_SE · SAP Global Label Management (GLM)

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://me.sap.com/notes/1938764 https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html