Shared Service Framework (Sap) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2024-08-13. Vendor: Sap.

CVEs of Shared Service Framework

• CVE-2024-42377 - CVSS 4.3 (medium), 2024-08-13: SAP shared service framework allows an authenticated non-administrative user to call a remote-enabled function, which will allow them to insert value entries…
• CVE-2024-42376 - CVSS 6.5 (medium), 2024-08-13: SAP Shared Service Framework does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. On successful…