SAP Note 3438085
Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server
MediumCVSS 6.3SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2024-33005
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
Affected products and versions
- Product SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server
Versions: KRNL64NUC 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, WEBDISP 7.53, WEBDISP 7.77, WEBDISP 7.85, WEBDISP 7.22_EXT, WEBDISP 7.89, WEBDISP 7.54, WEBDISP 7.93, KERNEL 7.22, KERNEL 7.53, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.93
Appears in
Patch Days listing this note, newest first.
- August 2024MediumCVSS 6.3