csaf_ncscnl - ncsc-2025-0045

Vulnerability from csaf_ncscnl

Published

2025-02-11 09:08

Modified

2025-02-11 09:08

Summary

Kwetsbaarheden verholpen in SAP producten

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

SAP heeft kwetsbaarheden verholpen in onder andere SAP NetWeaver, BusinessObjects Business Intelligence platform, Enterprise Project Connection en Commerce.

Interpretaties

De kwetsbaarheden in SAP NetWeaver omvatten een gebrek aan toegangscontrole, wat ongeauthenticeerde aanvallers in staat stelt om toegang te krijgen tot gevoelige serverinstellingen en gegevens. Daarnaast zijn er Cross-Site Scripting kwetsbaarheden in SAP producten die de vertrouwelijkheid van gegevens ernstig kunnen aantasten. De kwetsbaarheden kunnen worden misbruikt door aanvallers om ongeautoriseerde toegang te verkrijgen tot gevoelige informatie, wat kan leiden tot datalekken en andere beveiligingsincidenten.

Oplossingen

SAP heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans

medium

Schade

high

CWE-921

Storage of Sensitive Data in a Mechanism without Access Control

CWE-1021

Improper Restriction of Rendered UI Layers or Frames

CWE-1188

Initialization of a Resource with an Insecure Default

CWE-178

Improper Handling of Case Sensitivity

CWE-732

Incorrect Permission Assignment for Critical Resource

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

CWE-644

Improper Neutralization of HTTP Headers for Scripting Syntax

CWE-204

Observable Response Discrepancy

CWE-404

Improper Resource Shutdown or Release

CWE-306

Missing Authentication for Critical Function

CWE-862

Missing Authorization

CWE-352

Cross-Site Request Forgery (CSRF)

CWE-284

Improper Access Control

CWE-863

Incorrect Authorization

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-287

Improper Authentication

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

JSON

To clipboard

{
   document: {
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
         },
      },
      lang: "nl",
      notes: [
         {
            category: "legal_disclaimer",
            text: "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.",
         },
         {
            category: "description",
            text: "SAP heeft kwetsbaarheden verholpen in onder andere SAP NetWeaver, BusinessObjects Business Intelligence platform, Enterprise Project Connection en Commerce.",
            title: "Feiten",
         },
         {
            category: "description",
            text: "De kwetsbaarheden in SAP NetWeaver omvatten een gebrek aan toegangscontrole, wat ongeauthenticeerde aanvallers in staat stelt om toegang te krijgen tot gevoelige serverinstellingen en gegevens. Daarnaast zijn er Cross-Site Scripting kwetsbaarheden in SAP producten die de vertrouwelijkheid van gegevens ernstig kunnen aantasten. De kwetsbaarheden kunnen worden misbruikt door aanvallers om ongeautoriseerde toegang te verkrijgen tot gevoelige informatie, wat kan leiden tot datalekken en andere beveiligingsincidenten.",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "SAP heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
            title: "Oplossingen",
         },
         {
            category: "general",
            text: "medium",
            title: "Kans",
         },
         {
            category: "general",
            text: "high",
            title: "Schade",
         },
         {
            category: "general",
            text: "Storage of Sensitive Data in a Mechanism without Access Control",
            title: "CWE-921",
         },
         {
            category: "general",
            text: "Improper Restriction of Rendered UI Layers or Frames",
            title: "CWE-1021",
         },
         {
            category: "general",
            text: "Initialization of a Resource with an Insecure Default",
            title: "CWE-1188",
         },
         {
            category: "general",
            text: "Improper Handling of Case Sensitivity",
            title: "CWE-178",
         },
         {
            category: "general",
            text: "Incorrect Permission Assignment for Critical Resource",
            title: "CWE-732",
         },
         {
            category: "general",
            text: "URL Redirection to Untrusted Site ('Open Redirect')",
            title: "CWE-601",
         },
         {
            category: "general",
            text: "Improper Neutralization of HTTP Headers for Scripting Syntax",
            title: "CWE-644",
         },
         {
            category: "general",
            text: "Observable Response Discrepancy",
            title: "CWE-204",
         },
         {
            category: "general",
            text: "Improper Resource Shutdown or Release",
            title: "CWE-404",
         },
         {
            category: "general",
            text: "Missing Authentication for Critical Function",
            title: "CWE-306",
         },
         {
            category: "general",
            text: "Missing Authorization",
            title: "CWE-862",
         },
         {
            category: "general",
            text: "Cross-Site Request Forgery (CSRF)",
            title: "CWE-352",
         },
         {
            category: "general",
            text: "Improper Access Control",
            title: "CWE-284",
         },
         {
            category: "general",
            text: "Incorrect Authorization",
            title: "CWE-863",
         },
         {
            category: "general",
            text: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
            title: "CWE-22",
         },
         {
            category: "general",
            text: "Improper Authentication",
            title: "CWE-287",
         },
         {
            category: "general",
            text: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
            title: "CWE-79",
         },
      ],
      publisher: {
         category: "coordinator",
         contact_details: "cert@ncsc.nl",
         name: "Nationaal Cyber Security Centrum",
         namespace: "https://www.ncsc.nl/",
      },
      references: [
         {
            category: "external",
            summary: "Reference - ncscclear",
            url: "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/february-2025.html",
         },
      ],
      title: "Kwetsbaarheden verholpen in SAP producten",
      tracking: {
         current_release_date: "2025-02-11T09:08:48.427126Z",
         id: "NCSC-2025-0045",
         initial_release_date: "2025-02-11T09:08:48.427126Z",
         revision_history: [
            {
               date: "2025-02-11T09:08:48.427126Z",
               number: "0",
               summary: "Initiele versie",
            },
         ],
         status: "final",
         version: "1.0.0",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_name",
                  name: "supplier_relationship_management",
                  product: {
                     name: "supplier_relationship_management",
                     product_id: "CSAFPID-1760711",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:sap:supplier_relationship_management:7.52:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "netweaver",
                  product: {
                     name: "netweaver",
                     product_id: "CSAFPID-16504",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:sap:netweaver:application_server_java:7.50:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "netweaver_server_abap",
                  product: {
                     name: "netweaver_server_abap",
                     product_id: "CSAFPID-1760738",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:sap:netweaver_server_abap:758:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "netweaver_java_application_server",
                  product: {
                     name: "netweaver_java_application_server",
                     product_id: "CSAFPID-406035",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:sap:netweaver_java_application_server:7.5:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "netweaver_as_java",
                  product: {
                     name: "netweaver_as_java",
                     product_id: "CSAFPID-837776",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:sap:netweaver_as_java:7.50:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "netweaver_application_server_java",
                  product: {
                     name: "netweaver_application_server_java",
                     product_id: "CSAFPID-1760739",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:sap:netweaver_application_server_java:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "netweaver_as_java_for_deploy_service",
                  product: {
                     name: "netweaver_as_java_for_deploy_service",
                     product_id: "CSAFPID-1759878",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:sap:netweaver_as_java_for_deploy_service:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "abap_platform",
                  product: {
                     name: "abap_platform",
                     product_id: "CSAFPID-340940",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:sap:abap_platform:758:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "commerce_backoffice",
                  product: {
                     name: "commerce_backoffice",
                     product_id: "CSAFPID-1760724",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:sap:commerce_backoffice:*:*:*:*:*:*:*:*",
                     },
                  },
               },
               {
                  category: "product_name",
                  name: "commerce",
                  product: {
                     name: "commerce",
                     product_id: "CSAFPID-234320",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:sap:commerce:*:*:*:*:*:*:*:*",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "sap",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-24527",
         cwe: {
            id: "CWE-306",
            name: "Missing Authentication for Critical Function",
         },
         notes: [
            {
               category: "other",
               text: "Missing Authentication for Critical Function",
               title: "CWE-306",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2023-24527",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-24527.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2023-24527",
      },
      {
         cve: "CVE-2024-22126",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         notes: [
            {
               category: "other",
               text: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
               title: "CWE-79",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-22126",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22126.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2024-22126",
      },
      {
         cve: "CVE-2024-38819",
         cwe: {
            id: "CWE-22",
            name: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
         },
         notes: [
            {
               category: "other",
               text: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
               title: "CWE-22",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-38819",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38819.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2024-38819",
      },
      {
         cve: "CVE-2024-38820",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
            {
               category: "other",
               text: "Improper Handling of Case Sensitivity",
               title: "CWE-178",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-38820",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38820.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2024-38820",
      },
      {
         cve: "CVE-2024-38828",
         cwe: {
            id: "CWE-404",
            name: "Improper Resource Shutdown or Release",
         },
         notes: [
            {
               category: "other",
               text: "Improper Resource Shutdown or Release",
               title: "CWE-404",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-38828",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38828.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2024-38828",
      },
      {
         cve: "CVE-2024-45216",
         cwe: {
            id: "CWE-287",
            name: "Improper Authentication",
         },
         notes: [
            {
               category: "other",
               text: "Improper Authentication",
               title: "CWE-287",
            },
            {
               category: "other",
               text: "Incorrect Authorization",
               title: "CWE-863",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-45216",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45216.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2024-45216",
      },
      {
         cve: "CVE-2024-45217",
         cwe: {
            id: "CWE-1188",
            name: "Initialization of a Resource with an Insecure Default",
         },
         notes: [
            {
               category: "other",
               text: "Initialization of a Resource with an Insecure Default",
               title: "CWE-1188",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2024-45217",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45217.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2024-45217",
      },
      {
         cve: "CVE-2025-0054",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         notes: [
            {
               category: "other",
               text: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
               title: "CWE-79",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-0054",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-0054.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-0054",
      },
      {
         cve: "CVE-2025-0064",
         cwe: {
            id: "CWE-732",
            name: "Incorrect Permission Assignment for Critical Resource",
         },
         notes: [
            {
               category: "other",
               text: "Incorrect Permission Assignment for Critical Resource",
               title: "CWE-732",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-0064",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-0064.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-0064",
      },
      {
         cve: "CVE-2025-23187",
         cwe: {
            id: "CWE-862",
            name: "Missing Authorization",
         },
         notes: [
            {
               category: "other",
               text: "Missing Authorization",
               title: "CWE-862",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-23187",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23187.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-23187",
      },
      {
         cve: "CVE-2025-23189",
         cwe: {
            id: "CWE-862",
            name: "Missing Authorization",
         },
         notes: [
            {
               category: "other",
               text: "Missing Authorization",
               title: "CWE-862",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-23189",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23189.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-23189",
      },
      {
         cve: "CVE-2025-23190",
         cwe: {
            id: "CWE-862",
            name: "Missing Authorization",
         },
         notes: [
            {
               category: "other",
               text: "Missing Authorization",
               title: "CWE-862",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-23190",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23190.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-23190",
      },
      {
         cve: "CVE-2025-23191",
         cwe: {
            id: "CWE-644",
            name: "Improper Neutralization of HTTP Headers for Scripting Syntax",
         },
         notes: [
            {
               category: "other",
               text: "Improper Neutralization of HTTP Headers for Scripting Syntax",
               title: "CWE-644",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-23191",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23191.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.1,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-23191",
      },
      {
         cve: "CVE-2025-23193",
         cwe: {
            id: "CWE-204",
            name: "Observable Response Discrepancy",
         },
         notes: [
            {
               category: "other",
               text: "Observable Response Discrepancy",
               title: "CWE-204",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-23193",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23193.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-23193",
      },
      {
         cve: "CVE-2025-24867",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         notes: [
            {
               category: "other",
               text: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
               title: "CWE-79",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-24867",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24867.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-24867",
      },
      {
         cve: "CVE-2025-24868",
         cwe: {
            id: "CWE-601",
            name: "URL Redirection to Untrusted Site ('Open Redirect')",
         },
         notes: [
            {
               category: "other",
               text: "URL Redirection to Untrusted Site ('Open Redirect')",
               title: "CWE-601",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-24868",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24868.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-24868",
      },
      {
         cve: "CVE-2025-24869",
         cwe: {
            id: "CWE-863",
            name: "Incorrect Authorization",
         },
         notes: [
            {
               category: "other",
               text: "Incorrect Authorization",
               title: "CWE-863",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-24869",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24869.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-24869",
      },
      {
         cve: "CVE-2025-24870",
         cwe: {
            id: "CWE-921",
            name: "Storage of Sensitive Data in a Mechanism without Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Storage of Sensitive Data in a Mechanism without Access Control",
               title: "CWE-921",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-24870",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24870.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-24870",
      },
      {
         cve: "CVE-2025-24872",
         cwe: {
            id: "CWE-863",
            name: "Incorrect Authorization",
         },
         notes: [
            {
               category: "other",
               text: "Incorrect Authorization",
               title: "CWE-863",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-24872",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24872.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-24872",
      },
      {
         cve: "CVE-2025-24874",
         cwe: {
            id: "CWE-1021",
            name: "Improper Restriction of Rendered UI Layers or Frames",
         },
         notes: [
            {
               category: "other",
               text: "Improper Restriction of Rendered UI Layers or Frames",
               title: "CWE-1021",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-24874",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24874.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-24874",
      },
      {
         cve: "CVE-2025-24875",
         cwe: {
            id: "CWE-352",
            name: "Cross-Site Request Forgery (CSRF)",
         },
         notes: [
            {
               category: "other",
               text: "Cross-Site Request Forgery (CSRF)",
               title: "CWE-352",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-24875",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24875.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-24875",
      },
      {
         cve: "CVE-2025-24876",
         cwe: {
            id: "CWE-601",
            name: "URL Redirection to Untrusted Site ('Open Redirect')",
         },
         notes: [
            {
               category: "other",
               text: "URL Redirection to Untrusted Site ('Open Redirect')",
               title: "CWE-601",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-24876",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24876.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-24876",
      },
      {
         cve: "CVE-2025-25241",
         cwe: {
            id: "CWE-862",
            name: "Missing Authorization",
         },
         notes: [
            {
               category: "other",
               text: "Missing Authorization",
               title: "CWE-862",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-25241",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-25241.json",
            },
         ],
         title: "CVE-2025-25241",
      },
      {
         cve: "CVE-2025-25243",
         cwe: {
            id: "CWE-22",
            name: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
         },
         notes: [
            {
               category: "other",
               text: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
               title: "CWE-22",
            },
            {
               category: "general",
               text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
               title: "CVSSV4",
            },
         ],
         product_status: {
            known_affected: [
               "CSAFPID-1760711",
               "CSAFPID-16504",
               "CSAFPID-1760738",
               "CSAFPID-406035",
               "CSAFPID-837776",
               "CSAFPID-1760739",
               "CSAFPID-1759878",
               "CSAFPID-340940",
               "CSAFPID-1760724",
               "CSAFPID-234320",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2025-25243",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-25243.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.6,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-1760711",
                  "CSAFPID-16504",
                  "CSAFPID-1760738",
                  "CSAFPID-406035",
                  "CSAFPID-837776",
                  "CSAFPID-1760739",
                  "CSAFPID-1759878",
                  "CSAFPID-340940",
                  "CSAFPID-1760724",
                  "CSAFPID-234320",
               ],
            },
         ],
         title: "CVE-2025-25243",
      },
   ],
}

cve-2024-38828

Vulnerability from cvelistv5

Published

2024-11-18 03:45

Modified

2025-03-13 14:41

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Summary

Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.

References

▼	URL	Tags
	https://spring.io/security/cve-2024-38828

Impacted products

	Vendor	Product	Version
	Spring	Spring	Version: 5.3.x

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:vmware:spring:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "spring",
                  vendor: "vmware",
                  versions: [
                     {
                        lessThan: "5.3.42",
                        status: "affected",
                        version: "5.3.0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-38828",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-11-18T15:07:55.672409Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-400",
                        description: "CWE-400 Uncontrolled Resource Consumption",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-03-13T14:41:48.613Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "affected",
               packageName: "Spring Framework",
               product: "Spring",
               vendor: "Spring",
               versions: [
                  {
                     lessThan: "5.3.42",
                     status: "affected",
                     version: "5.3.x",
                     versionType: "commercial",
                  },
               ],
            },
         ],
         datePublic: "2024-11-15T15:43:00.000Z",
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>Spring MVC controller methods with an <code>@RequestBody byte[]</code>&nbsp;method parameter are vulnerable to a DoS attack.</p>",
                  },
               ],
               value: "Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-11-18T03:45:46.542Z",
            orgId: "dcf2e128-44bd-42ed-91e8-88f912c1401d",
            shortName: "vmware",
         },
         references: [
            {
               url: "https://spring.io/security/cve-2024-38828",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "dcf2e128-44bd-42ed-91e8-88f912c1401d",
      assignerShortName: "vmware",
      cveId: "CVE-2024-38828",
      datePublished: "2024-11-18T03:45:46.542Z",
      dateReserved: "2024-06-19T22:32:07.790Z",
      dateUpdated: "2025-03-13T14:41:48.613Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-23187

Vulnerability from cvelistv5

Published

2025-02-11 00:33

Modified

2025-02-18 18:07

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Summary

Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an unauthenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability.

References

▼	URL	Tags
	https://me.sap.com/notes/3546470
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP NetWeaver and ABAP Platform (SDCCN)	Version: ST-PI 2008_1_700 Version: ST-PI 2008_1_710 Version: ST-PI 740

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-23187",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T14:44:12.456549Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-18T18:07:28.098Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP NetWeaver and ABAP Platform (SDCCN)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "ST-PI 2008_1_700",
                  },
                  {
                     status: "affected",
                     version: "ST-PI 2008_1_710",
                  },
                  {
                     status: "affected",
                     version: "ST-PI 740",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an unauthenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability.</p>",
                  },
               ],
               value: "Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an unauthenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-862",
                     description: "CWE-862: Missing Authorization",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:33:10.032Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3546470",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-23187",
      datePublished: "2025-02-11T00:33:10.032Z",
      dateReserved: "2025-01-13T11:13:59.546Z",
      dateUpdated: "2025-02-18T18:07:28.098Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-23191

Vulnerability from cvelistv5

Published

2025-02-11 00:35

Modified

2025-02-11 16:01

Severity ?

3.1 (Low) - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Summary

Cached values belonging to the SAP OData endpoint in SAP Fiori for SAP ERP could be poisoned by modifying the Host header value in an HTTP GET request. An attacker could alter the `atom:link` values in the returned metadata redirecting them from the SAP server to a malicious link set by the attacker. Successful exploitation could cause low impact on integrity of the application.

References

▼	URL	Tags
	https://me.sap.com/notes/3426825
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP Fiori for SAP ERP	Version: SAP_GWFND 740 Version: 750 Version: 751 Version: 752 Version: 753 Version: 754 Version: 755 Version: 756 Version: 757 Version: 758

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-23191",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T16:00:54.483093Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-11T16:01:14.823Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP Fiori for SAP ERP",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "SAP_GWFND 740",
                  },
                  {
                     status: "affected",
                     version: "750",
                  },
                  {
                     status: "affected",
                     version: "751",
                  },
                  {
                     status: "affected",
                     version: "752",
                  },
                  {
                     status: "affected",
                     version: "753",
                  },
                  {
                     status: "affected",
                     version: "754",
                  },
                  {
                     status: "affected",
                     version: "755",
                  },
                  {
                     status: "affected",
                     version: "756",
                  },
                  {
                     status: "affected",
                     version: "757",
                  },
                  {
                     status: "affected",
                     version: "758",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>Cached values belonging to the SAP OData endpoint in SAP Fiori for SAP ERP could be poisoned by modifying the Host header value in an HTTP GET request. An attacker could alter the `atom:link` values in the returned metadata redirecting them from the SAP server to a malicious link set by the attacker. Successful exploitation could cause low impact on integrity of the application.</p>",
                  },
               ],
               value: "Cached values belonging to the SAP OData endpoint in SAP Fiori for SAP ERP could be poisoned by modifying the Host header value in an HTTP GET request. An attacker could alter the `atom:link` values in the returned metadata redirecting them from the SAP server to a malicious link set by the attacker. Successful exploitation could cause low impact on integrity of the application.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 3.1,
                  baseSeverity: "LOW",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-644",
                     description: "CWE-644: Improper Neutralization of HTTP Headers for Scripting Syntax",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:35:15.392Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3426825",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-23191",
      datePublished: "2025-02-11T00:35:15.392Z",
      dateReserved: "2025-01-13T11:13:59.547Z",
      dateUpdated: "2025-02-11T16:01:14.823Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-24870

Vulnerability from cvelistv5

Published

2025-02-11 00:37

Modified

2025-02-18 18:06

Severity ?

6.0 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Summary

SAP GUI for Windows & RFC service credentials are incorrectly stored in the memory of the program allowing an unauthenticated attacker to access information within systems, resulting in privilege escalation. On successful exploitation, this could result in disclosure of highly sensitive information. This has no impact on integrity, and availability.

References

▼	URL	Tags
	https://me.sap.com/notes/3562336
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP GUI for Windows	Version: BC-FES-GUI 8.00

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-24870",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T05:51:12.545465Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-18T18:06:30.865Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP GUI for Windows",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "BC-FES-GUI 8.00",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>SAP GUI for Windows &amp; RFC service credentials are incorrectly stored in the memory of the program allowing an unauthenticated attacker to access information within systems, resulting in privilege escalation. On successful exploitation, this could result in disclosure of highly sensitive information. This has no impact on integrity, and availability.</p>",
                  },
               ],
               value: "SAP GUI for Windows & RFC service credentials are incorrectly stored in the memory of the program allowing an unauthenticated attacker to access information within systems, resulting in privilege escalation. On successful exploitation, this could result in disclosure of highly sensitive information. This has no impact on integrity, and availability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "NONE",
                  baseScore: 6,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "HIGH",
                  scope: "CHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-921",
                     description: "CWE-921: Storage of Sensitive Data in a Mechanism without Access Control",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:37:05.969Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3562336",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Insecure Key & Secret Management vulnerability in SAP GUI for Windows",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-24870",
      datePublished: "2025-02-11T00:37:05.969Z",
      dateReserved: "2025-01-27T08:57:48.544Z",
      dateUpdated: "2025-02-18T18:06:30.865Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-25241

Vulnerability from cvelistv5

Published

2025-02-11 00:37

Modified

2025-02-18 18:04

Severity ?

5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Summary

Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.

References

▼	URL	Tags
	https://me.sap.com/notes/3532025
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP Fiori Apps Reference Library (My Overtime Requests)	Version: GBX01HR5 605

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-25241",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T05:42:35.113568Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-18T18:04:01.194Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP Fiori Apps Reference Library (My Overtime Requests)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "GBX01HR5 605",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.</p>",
                  },
               ],
               value: "Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-862",
                     description: "CWE-862: Missing Authorization",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:37:53.612Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3532025",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests)",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-25241",
      datePublished: "2025-02-11T00:37:53.612Z",
      dateReserved: "2025-02-04T23:28:33.502Z",
      dateUpdated: "2025-02-18T18:04:01.194Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-45217

Vulnerability from cvelistv5

Published

2024-10-16 07:51

Modified

2024-10-16 15:08

Severity ?

Summary

Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the "trusted" metadata. ConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to "trusted" ConfigSets that may not have been created with an Authenticated request. "trusted" ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated & Authorized. This issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization. Users are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise.

References

▼	URL	Tags
	https://solr.apache.org/security.html#cve-2024-45217-apache-solr-configsets-created-during-a-backup-restore-command-are-trusted-implicitly	vendor-advisory

Impacted products

	Vendor	Product	Version
	Apache Software Foundation	Apache Solr	Version: 6.6.0 ≤ Version: 9.0.0 ≤

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-10-16T08:03:37.258Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  url: "http://www.openwall.com/lists/oss-security/2024/10/15/9",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:apache_software_foundation:apache_solr:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "apache_solr",
                  vendor: "apache_software_foundation",
                  versions: [
                     {
                        lessThan: "8.11.4",
                        status: "affected",
                        version: "6.6.0",
                        versionType: "semver",
                     },
                     {
                        lessThan: "9.7.0",
                        status: "affected",
                        version: "9.0.0",
                        versionType: "semver",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 8.1,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "LOW",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2024-45217",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-16T14:59:42.757440Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-16T15:08:26.625Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Apache Solr",
               vendor: "Apache Software Foundation",
               versions: [
                  {
                     lessThan: "8.11.4",
                     status: "affected",
                     version: "6.6.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "9.7.0",
                     status: "affected",
                     version: "9.0.0",
                     versionType: "semver",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "reporter",
               value: "Liu Huajin",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>Insecure Default Initialization of Resource vulnerability in Apache Solr.</p><p><span style=\"background-color: rgb(255, 255, 255);\">New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the \"trusted\" metadata.<br>ConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to \"trusted\" ConfigSets that may not have been created with an Authenticated request.</span><br><span style=\"background-color: rgb(255, 255, 255);\">\"trusted\" ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated &amp; Authorized.</span></p><p>This issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization.</p><p>Users are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise.</p><p></p>",
                  },
               ],
               value: "Insecure Default Initialization of Resource vulnerability in Apache Solr.\n\nNew ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the \"trusted\" metadata.\nConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to \"trusted\" ConfigSets that may not have been created with an Authenticated request.\n\"trusted\" ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated & Authorized.\n\nThis issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization.\n\nUsers are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     text: "moderate",
                  },
                  type: "Textual description of severity",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-1188",
                     description: "CWE-1188 Insecure Default Initialization of Resource",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-10-16T07:51:16.558Z",
            orgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
            shortName: "apache",
         },
         references: [
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://solr.apache.org/security.html#cve-2024-45217-apache-solr-configsets-created-during-a-backup-restore-command-are-trusted-implicitly",
            },
         ],
         source: {
            defect: [
               "SOLR-17418",
            ],
            discovery: "EXTERNAL",
         },
         title: "Apache Solr: ConfigSets created during a backup restore command are trusted implicitly",
         x_generator: {
            engine: "Vulnogram 0.1.0-dev",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
      assignerShortName: "apache",
      cveId: "CVE-2024-45217",
      datePublished: "2024-10-16T07:51:16.558Z",
      dateReserved: "2024-08-23T17:50:50.872Z",
      dateUpdated: "2024-10-16T15:08:26.625Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-24875

Vulnerability from cvelistv5

Published

2025-02-11 00:37

Modified

2025-02-18 18:05

Severity ?

6.8 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Summary

SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This includes authentication cookies utilized in SAP Commerce Backoffice. Applying this setting reduces defense in depth against CSRF and may lead to future compatibility issues.

References

▼	URL	Tags
	https://me.sap.com/notes/3555364
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP Commerce	Version: HY_COM 2205 Version: COM_CLOUD 2211

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-24875",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T05:46:21.384763Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-18T18:05:00.986Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP Commerce",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "HY_COM 2205",
                  },
                  {
                     status: "affected",
                     version: "COM_CLOUD 2211",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This includes authentication cookies utilized in SAP Commerce Backoffice. Applying this setting reduces defense in depth against CSRF and may lead to future compatibility issues.</p>",
                  },
               ],
               value: "SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This includes authentication cookies utilized in SAP Commerce Backoffice. Applying this setting reduces defense in depth against CSRF and may lead to future compatibility issues.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-352",
                     description: "CWE-352: Cross-Site Request Forgery (CSRF)",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:37:32.280Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3555364",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "SameSite Defense in Depth not applied for some cookies in SAP Commerce",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-24875",
      datePublished: "2025-02-11T00:37:32.280Z",
      dateReserved: "2025-01-27T08:57:48.545Z",
      dateUpdated: "2025-02-18T18:05:00.986Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-24872

Vulnerability from cvelistv5

Published

2025-02-11 00:37

Modified

2025-02-18 18:06

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

The ABAP Build Framework in SAP ABAP Platform allows an authenticated attacker to gain unauthorized access to a specific transaction. By executing the add-on build functionality within the ABAP Build Framework, an attacker could call the transaction and view its details. This has a limited impact on the confidentiality of the application with no effect on the integrity and availability of the application.

References

▼	URL	Tags
	https://me.sap.com/notes/3553753
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP ABAP Platform (ABAP Build Framework)	Version: SAP_BASIS 750 Version: SAP_BASIS 751 Version: SAP_BASIS 752 Version: SAP_BASIS 753 Version: SAP_BASIS 754 Version: SAP_BASIS 755 Version: SAP_BASIS 756 Version: SAP_BASIS 757 Version: SAP_BASIS 758

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-24872",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T05:49:59.599033Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-18T18:06:00.780Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP ABAP Platform (ABAP Build Framework)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "SAP_BASIS 750",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 751",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 752",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 753",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 754",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 755",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 756",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 757",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 758",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>The ABAP Build Framework in SAP ABAP Platform allows an authenticated attacker to gain unauthorized access to a specific transaction. By executing the add-on build functionality within the ABAP Build Framework, an attacker could call the transaction and view its details. This has a limited impact on the confidentiality of the application with no effect on the integrity and availability of the application.</p>",
                  },
               ],
               value: "The ABAP Build Framework in SAP ABAP Platform allows an authenticated attacker to gain unauthorized access to a specific transaction. By executing the add-on build functionality within the ABAP Build Framework, an attacker could call the transaction and view its details. This has a limited impact on the confidentiality of the application with no effect on the integrity and availability of the application.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-863",
                     description: "CWE-863: Incorrect Authorization",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:37:14.780Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3553753",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Missing Authorization check in SAP ABAP Platform (ABAP Build Framework)",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-24872",
      datePublished: "2025-02-11T00:37:14.780Z",
      dateReserved: "2025-01-27T08:57:48.545Z",
      dateUpdated: "2025-02-18T18:06:00.780Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-45216

Vulnerability from cvelistv5

Published

2024-10-16 07:50

Modified

2024-11-08 04:55

Severity ?

Summary

Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing. This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0. Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.

References

▼	URL	Tags
	https://solr.apache.org/security.html#cve-2024-45216-apache-solr-authentication-bypass-possible-using-a-fake-url-path-ending	vendor-advisory

Impacted products

	Vendor	Product	Version
	Apache Software Foundation	Apache Solr	Version: 5.3.0 ≤ Version: 9.0.0 ≤

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-10-16T08:03:35.785Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  url: "http://www.openwall.com/lists/oss-security/2024/10/15/8",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "solr",
                  vendor: "apache",
                  versions: [
                     {
                        lessThan: "8.11.4",
                        status: "affected",
                        version: "5.3.0",
                        versionType: "semver",
                     },
                     {
                        lessThan: "9.7.0",
                        status: "affected",
                        version: "9.0.0",
                        versionType: "semver",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 9.8,
                     baseSeverity: "CRITICAL",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2024-45216",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-11-07T00:00:00+00:00",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-863",
                        description: "CWE-863 Incorrect Authorization",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-11-08T04:55:08.457Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Apache Solr",
               vendor: "Apache Software Foundation",
               versions: [
                  {
                     lessThan: "8.11.4",
                     status: "affected",
                     version: "5.3.0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "9.7.0",
                     status: "affected",
                     version: "9.0.0",
                     versionType: "semver",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "reporter",
               value: "Liu Huajin",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>Improper Authentication vulnerability in Apache Solr.</p>Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass.<br>A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path.<br>This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.<br><p></p><p>This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.</p><p>Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.</p>",
                  },
               ],
               value: "Improper Authentication vulnerability in Apache Solr.\n\nSolr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass.\nA fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path.\nThis fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.\n\n\nThis issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.\n\nUsers are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.",
            },
         ],
         metrics: [
            {
               other: {
                  content: {
                     text: "critical",
                  },
                  type: "Textual description of severity",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-287",
                     description: "CWE-287 Improper Authentication",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-10-16T07:50:25.965Z",
            orgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
            shortName: "apache",
         },
         references: [
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://solr.apache.org/security.html#cve-2024-45216-apache-solr-authentication-bypass-possible-using-a-fake-url-path-ending",
            },
         ],
         source: {
            defect: [
               "SOLR-17417",
            ],
            discovery: "EXTERNAL",
         },
         title: "Apache Solr: Authentication bypass possible using a fake URL Path ending",
         x_generator: {
            engine: "Vulnogram 0.1.0-dev",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "f0158376-9dc2-43b6-827c-5f631a4d8d09",
      assignerShortName: "apache",
      cveId: "CVE-2024-45216",
      datePublished: "2024-10-16T07:50:25.965Z",
      dateReserved: "2024-08-23T17:15:16.710Z",
      dateUpdated: "2024-11-08T04:55:08.457Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-23190

Vulnerability from cvelistv5

Published

2025-02-11 00:35

Modified

2025-02-11 16:01

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

Due to missing authorization check, an authenticated attacker could call a remote-enabled function module which allows them to access data that they would otherwise not have access to. The attacker cannot modify data or impact the availability of the system.

References

▼	URL	Tags
	https://me.sap.com/notes/3547581
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP NetWeaver and ABAP platform (ST-PI)	Version: ST-PI 2008_1_700 Version: ST-PI 2008_1_710 Version: ST-PI 740

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-23190",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T16:01:26.011098Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-11T16:01:38.164Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP NetWeaver and ABAP platform (ST-PI)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "ST-PI 2008_1_700",
                  },
                  {
                     status: "affected",
                     version: "ST-PI 2008_1_710",
                  },
                  {
                     status: "affected",
                     version: "ST-PI 740",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>Due to missing authorization check, an authenticated attacker could call a remote-enabled function module which allows them to access data that they would otherwise not have access to. The attacker cannot modify data or impact the availability of the system.</p>",
                  },
               ],
               value: "Due to missing authorization check, an authenticated attacker could call a remote-enabled function module which allows them to access data that they would otherwise not have access to. The attacker cannot modify data or impact the availability of the system.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-862",
                     description: "CWE-862: Missing Authorization",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:41:53.807Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3547581",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI)",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-23190",
      datePublished: "2025-02-11T00:35:03.340Z",
      dateReserved: "2025-01-13T11:13:59.547Z",
      dateUpdated: "2025-02-11T16:01:38.164Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-23193

Vulnerability from cvelistv5

Published

2025-02-11 00:35

Modified

2025-02-11 16:00

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

SAP NetWeaver Server ABAP allows an unauthenticated attacker to exploit a vulnerability that causes the server to respond differently based on the existence of a specified user, potentially revealing sensitive information. This issue does not enable data modification and has no impact on server availability.

References

▼	URL	Tags
	https://me.sap.com/notes/3561264
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP NetWeaver Server ABAP	Version: SAP_BASIS 700 Version: SAP_BASIS 701 Version: SAP_BASIS 702 Version: SAP_BASIS 731 Version: SAP_BASIS 740 Version: SAP_BASIS 750 Version: SAP_BASIS 751 Version: SAP_BASIS 752 Version: SAP_BASIS 753 Version: SAP_BASIS 754 Version: SAP_BASIS 755 Version: SAP_BASIS 756 Version: SAP_BASIS 757 Version: SAP_BASIS 758

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-23193",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T15:59:35.647495Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-11T16:00:41.684Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP NetWeaver Server ABAP",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "SAP_BASIS 700",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 701",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 702",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 731",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 740",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 750",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 751",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 752",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 753",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 754",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 755",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 756",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 757",
                  },
                  {
                     status: "affected",
                     version: "SAP_BASIS 758",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>SAP NetWeaver Server ABAP allows an unauthenticated attacker to exploit a vulnerability that causes the server to respond differently based on the existence of a specified user, potentially revealing sensitive information. This issue does not enable data modification and has no impact on server availability.</p>",
                  },
               ],
               value: "SAP NetWeaver Server ABAP allows an unauthenticated attacker to exploit a vulnerability that causes the server to respond differently based on the existence of a specified user, potentially revealing sensitive information. This issue does not enable data modification and has no impact on server availability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-204",
                     description: "CWE-204: Observable Response Discrepancy",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:35:25.783Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3561264",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-23193",
      datePublished: "2025-02-11T00:35:25.783Z",
      dateReserved: "2025-01-13T11:13:59.547Z",
      dateUpdated: "2025-02-11T16:00:41.684Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-24868

Vulnerability from cvelistv5

Published

2025-02-11 00:35

Modified

2025-02-11 15:55

Severity ?

7.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Summary

The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA XS advanced model) allows an unauthenticated attacker to craft a malicious link, that, when clicked by a victim, redirects the browser to a malicious site due to insufficient redirect URL validation. On successful exploitation attacker can cause limited impact on confidentiality, integrity, and availability of the system.

References

▼	URL	Tags
	https://me.sap.com/notes/3563929
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP HANA extended application services, advanced model (User Account and Authentication Services)	Version: SAP_EXTENDED_APP_SERVICES 1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-24868",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T15:55:43.125870Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-11T15:55:57.581Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP HANA extended application services, advanced model (User Account and Authentication Services)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "SAP_EXTENDED_APP_SERVICES 1",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA XS advanced model) allows an unauthenticated attacker to craft a malicious link, that, when clicked by a victim, redirects the browser to a malicious site due to insufficient redirect URL validation. On successful exploitation attacker can cause limited impact on confidentiality, integrity, and availability of the system.</p>",
                  },
               ],
               value: "The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA XS advanced model) allows an unauthenticated attacker to craft a malicious link, that, when clicked by a victim, redirects the browser to a malicious site due to insufficient redirect URL validation. On successful exploitation attacker can cause limited impact on confidentiality, integrity, and availability of the system.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "CHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-601",
                     description: "CWE-601: URL Redirection to Untrusted Site ('Open Redirect')",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:35:42.925Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3563929",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Open Redirect Vulnerability in SAP HANA extended application services, advanced model (User Account and Authentication Services)",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-24868",
      datePublished: "2025-02-11T00:35:42.925Z",
      dateReserved: "2025-01-27T08:57:48.544Z",
      dateUpdated: "2025-02-11T15:55:57.581Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-24527

Vulnerability from cvelistv5

Published

2023-04-11 02:33

Modified

2025-02-07 19:33

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will enable them to access but not modify server settings and data with no effect on availability and integrity.

References

▼	URL	Tags
	https://launchpad.support.sap.com/#/notes/3287784
	https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Impacted products

	Vendor	Product	Version
	SAP	NetWeaver AS Java for Deploy Service	Version: 7.50

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T10:56:04.429Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://launchpad.support.sap.com/#/notes/3287784",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-24527",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-07T19:33:47.097823Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-07T19:33:50.934Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "NetWeaver AS Java for Deploy Service",
               vendor: "SAP",
               versions: [
                  {
                     status: "affected",
                     version: "7.50",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will enable them to access but not modify server settings and data with no effect on availability and integrity.</p>",
                  },
               ],
               value: "SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will enable them to access but not modify server settings and data with no effect on availability and integrity.\n\n",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-306",
                     description: "CWE-306: Missing Authentication for Critical Function",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-04-11T21:25:19.634Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://launchpad.support.sap.com/#/notes/3287784",
            },
            {
               url: "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Improper Access Control in SAP NetWeaver AS Java for Deploy Service",
         x_generator: {
            engine: "Vulnogram 0.1.0-dev",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2023-24527",
      datePublished: "2023-04-11T02:33:38.624Z",
      dateReserved: "2023-01-25T15:46:55.581Z",
      dateUpdated: "2025-02-07T19:33:50.934Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-24867

Vulnerability from cvelistv5

Published

2025-02-11 00:35

Modified

2025-02-11 15:58

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Summary

SAP BusinessObjects Platform (BI Launchpad) does not sufficiently handle user input, resulting in Cross-Site Scripting (XSS) vulnerability. The application allows an unauthenticated attacker to craft a URL that embeds a malicious script within an unprotected parameter. When a victim clicks the link, the script will be executed in the browser, giving the attacker the ability to access and/or modify information related to the web client with no effect on availability.

References

▼	URL	Tags
	https://me.sap.com/notes/3445708
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP BusinessObjects Platform (BI Launchpad)	Version: ENTERPRISE 430 Version: 2025

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-24867",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T15:57:16.178703Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-11T15:58:14.220Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP BusinessObjects Platform (BI Launchpad)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "ENTERPRISE 430",
                  },
                  {
                     status: "affected",
                     version: "2025",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>SAP BusinessObjects Platform (BI Launchpad) does not sufficiently handle user input, resulting in Cross-Site Scripting (XSS) vulnerability. The application allows an unauthenticated attacker to craft a URL that embeds a malicious script within an unprotected parameter. When a victim clicks the link, the script will be executed in the browser, giving the attacker the ability to access and/or modify information related to the web client with no effect on availability.</p>",
                  },
               ],
               value: "SAP BusinessObjects Platform (BI Launchpad) does not sufficiently handle user input, resulting in Cross-Site Scripting (XSS) vulnerability. The application allows an unauthenticated attacker to craft a URL that embeds a malicious script within an unprotected parameter. When a victim clicks the link, the script will be executed in the browser, giving the attacker the ability to access and/or modify information related to the web client with no effect on availability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "CHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-79",
                     description: "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:35:34.021Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3445708",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (BI Launchpad)",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-24867",
      datePublished: "2025-02-11T00:35:34.021Z",
      dateReserved: "2025-01-27T08:57:48.544Z",
      dateUpdated: "2025-02-11T15:58:14.220Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-38819

Vulnerability from cvelistv5

Published

2024-12-19 17:15

Modified

2025-01-10 13:06

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.

References

▼	URL	Tags
	https://spring.io/security/cve-2024-38819

Impacted products

	Vendor	Product	Version
	N/A	Spring Framework	Version: Spring Framework 5.3.0 - 5.3.40, 6.0.0 - 6.0.24, 6.1.0 - 6.1.13

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-38819",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-20T17:53:51.980313Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-20T17:54:04.143Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2025-01-10T13:06:45.393Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  url: "https://security.netapp.com/advisory/ntap-20250110-0010/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Spring Framework",
               vendor: "N/A",
               versions: [
                  {
                     status: "affected",
                     version: "Spring Framework 5.3.0 - 5.3.40, 6.0.0 - 6.0.24, 6.1.0 - 6.1.13",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<span style=\"background-color: rgb(255, 255, 255);\">Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.</span>",
                  },
               ],
               value: "Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-22",
                     description: "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-19T17:15:12.704Z",
            orgId: "dcf2e128-44bd-42ed-91e8-88f912c1401d",
            shortName: "vmware",
         },
         references: [
            {
               url: "https://spring.io/security/cve-2024-38819",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "dcf2e128-44bd-42ed-91e8-88f912c1401d",
      assignerShortName: "vmware",
      cveId: "CVE-2024-38819",
      datePublished: "2024-12-19T17:15:12.704Z",
      dateReserved: "2024-06-19T22:32:06.583Z",
      dateUpdated: "2025-01-10T13:06:45.393Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-22126

Vulnerability from cvelistv5

Published

2024-02-13 01:58

Modified

2025-02-11 04:13

Severity ?

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Summary

The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.

References

▼	URL	Tags
	https://me.sap.com/notes/3417627
	https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
	https://me.sap.com/notes/3557138

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP NetWeaver AS Java (User Admin Application)	Version: 7.50

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-22126",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-09T16:21:27.522736Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-09T16:21:33.204Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T22:35:34.804Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://me.sap.com/notes/3417627",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP NetWeaver AS Java (User Admin Application)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "7.50",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.</p>",
                  },
               ],
               value: "The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "CHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-79",
                     description: "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T04:13:01.325Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3417627",
            },
            {
               url: "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
            },
            {
               url: "https://me.sap.com/notes/3557138",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Cross Site Scripting vulnerability in SAP NetWeaver AS Java (User Admin Application)",
         x_generator: {
            engine: "Vulnogram 0.1.0-dev",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2024-22126",
      datePublished: "2024-02-13T01:58:27.745Z",
      dateReserved: "2024-01-05T10:21:35.256Z",
      dateUpdated: "2025-02-11T04:13:01.325Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-25243

Vulnerability from cvelistv5

Published

2025-02-11 00:38

Modified

2025-02-18 18:03

Severity ?

8.6 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Summary

SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any user interaction. This can reveal highly sensitive information with no impact to integrity or availability.

References

▼	URL	Tags
	https://me.sap.com/notes/3567551
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP Supplier Relationship Management (Master Data Management Catalog)	Version: SRM_MDM_CAT 7.52

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-25243",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T05:40:50.118353Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-18T18:03:33.640Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP Supplier Relationship Management (Master Data Management Catalog)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "SRM_MDM_CAT 7.52",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any user interaction. This can reveal highly sensitive information with no impact to integrity or availability.</p>",
                  },
               ],
               value: "SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any user interaction. This can reveal highly sensitive information with no impact to integrity or availability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 8.6,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "CHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-22",
                     description: "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:38:02.558Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3567551",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog)",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-25243",
      datePublished: "2025-02-11T00:38:02.558Z",
      dateReserved: "2025-02-04T23:28:33.502Z",
      dateUpdated: "2025-02-18T18:03:33.640Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-24869

Vulnerability from cvelistv5

Published

2025-02-11 00:36

Modified

2025-02-18 18:07

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deployed server components, including their XML definitions. This information should ideally be restricted to customer administrators, even though they may not need it. These XML files are not entirely SAP-internal as they are deployed with the server. In such a scenario, sensitive information could be exposed without compromising its integrity or availability.

References

▼	URL	Tags
	https://me.sap.com/notes/3550027
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP NetWeaver Application Server Java	Version: WD-RUNTIME 7.50

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-24869",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T05:52:32.799607Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-18T18:07:04.307Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP NetWeaver Application Server Java",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "WD-RUNTIME 7.50",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deployed server components, including their XML definitions. This information should ideally be restricted to customer administrators, even though they may not need it. These XML files are not entirely SAP-internal as they are deployed with the server. In such a scenario, sensitive information could be exposed without compromising its integrity or availability.</p>",
                  },
               ],
               value: "SAP NetWeaver Application Server Java allows an attacker to access an endpoint that can disclose information about deployed server components, including their XML definitions. This information should ideally be restricted to customer administrators, even though they may not need it. These XML files are not entirely SAP-internal as they are deployed with the server. In such a scenario, sensitive information could be exposed without compromising its integrity or availability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-863",
                     description: "CWE-863: Incorrect Authorization",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:36:51.926Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3550027",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Information Disclosure vulnerability in SAP NetWeaver Application Server Java",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-24869",
      datePublished: "2025-02-11T00:36:51.926Z",
      dateReserved: "2025-01-27T08:57:48.544Z",
      dateUpdated: "2025-02-18T18:07:04.307Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-23189

Vulnerability from cvelistv5

Published

2025-02-11 00:33

Modified

2025-02-11 15:18

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Summary

Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an authenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability

References

▼	URL	Tags
	https://me.sap.com/notes/3546470
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP NetWeaver and ABAP Platform (SDCCN)	Version: ST-PI 2008_1_700 Version: ST-PI 2008_1_710 Version: ST-PI 740

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-23189",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T15:18:48.358164Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-11T15:18:55.445Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP NetWeaver and ABAP Platform (SDCCN)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "ST-PI 2008_1_700",
                  },
                  {
                     status: "affected",
                     version: "ST-PI 2008_1_710",
                  },
                  {
                     status: "affected",
                     version: "ST-PI 740",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an authenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability</p>",
                  },
               ],
               value: "Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an authenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-862",
                     description: "CWE-862: Missing Authorization",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:33:18.120Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3546470",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-23189",
      datePublished: "2025-02-11T00:33:18.120Z",
      dateReserved: "2025-01-13T11:13:59.547Z",
      dateUpdated: "2025-02-11T15:18:55.445Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-0054

Vulnerability from cvelistv5

Published

2025-02-11 00:32

Modified

2025-02-18 18:08

Severity ?

5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Summary

SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript payload on the server, which could be later executed in the victim's web browser. With this the attacker might be able to read or modify information associated with the vulnerable web page.

References

▼	URL	Tags
	https://me.sap.com/notes/3526203
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP NetWeaver Application Server Java	Version: EP-BASIS 7.50 Version: FRAMEWORK-EXT 7.50

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-0054",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T05:53:48.712687Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-18T18:08:26.569Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP NetWeaver Application Server Java",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "EP-BASIS 7.50",
                  },
                  {
                     status: "affected",
                     version: "FRAMEWORK-EXT 7.50",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript payload on the server, which could be later executed in the victim's web browser. With this the attacker might be able to read or modify information associated with the vulnerable web page.</p>",
                  },
               ],
               value: "SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript payload on the server, which could be later executed in the victim's web browser. With this the attacker might be able to read or modify information associated with the vulnerable web page.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "CHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-79",
                     description: "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:32:57.017Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3526203",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-0054",
      datePublished: "2025-02-11T00:32:57.017Z",
      dateReserved: "2024-12-05T21:37:30.337Z",
      dateUpdated: "2025-02-18T18:08:26.569Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-24874

Vulnerability from cvelistv5

Published

2025-02-11 00:37

Modified

2025-02-18 18:05

Severity ?

6.8 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Summary

SAP Commerce (Backoffice) uses the deprecated X-FRAME-OPTIONS header to protect against clickjacking. While this protection remains effective now, it may not be the case in the future as browsers might discontinue support for this header in favor of the frame-ancestors CSP directive. Hence, clickjacking could become possible then, and lead to exposure and modification of sensitive information.

References

▼	URL	Tags
	https://me.sap.com/notes/3559510
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP Commerce (Backoffice)	Version: HY_COM 2205 Version: COM_CLOUD 2211

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-24874",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T05:48:42.755695Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-18T18:05:26.373Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP Commerce (Backoffice)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "HY_COM 2205",
                  },
                  {
                     status: "affected",
                     version: "COM_CLOUD 2211",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>SAP Commerce (Backoffice) uses the deprecated X-FRAME-OPTIONS header to protect against clickjacking. While this protection remains effective now, it may not be the case in the future as browsers might discontinue support for this header in favor of the frame-ancestors CSP directive. Hence, clickjacking could become possible then, and lead to exposure and modification of sensitive information.</p>",
                  },
               ],
               value: "SAP Commerce (Backoffice) uses the deprecated X-FRAME-OPTIONS header to protect against clickjacking. While this protection remains effective now, it may not be the case in the future as browsers might discontinue support for this header in favor of the frame-ancestors CSP directive. Hence, clickjacking could become possible then, and lead to exposure and modification of sensitive information.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-1021",
                     description: "CWE-1021: Improper Restriction of Rendered UI Layers or Frames",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:37:22.842Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3559510",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Missing Defense in Depth Against Clickjacking in SAP Commerce Backoffice",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-24874",
      datePublished: "2025-02-11T00:37:22.842Z",
      dateReserved: "2025-01-27T08:57:48.545Z",
      dateUpdated: "2025-02-18T18:05:26.373Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-0064

Vulnerability from cvelistv5

Published

2025-02-11 00:33

Modified

2025-02-18 18:07

Severity ?

8.7 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Summary

Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.

References

▼	URL	Tags
	https://me.sap.com/notes/3525794
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP BusinessObjects Business Intelligence platform (Central Management Console)	Version: ENTERPRISE 430 Version: 2025

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-0064",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T14:45:56.644687Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-18T18:07:53.865Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP BusinessObjects Business Intelligence platform (Central Management Console)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "ENTERPRISE 430",
                  },
                  {
                     status: "affected",
                     version: "2025",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.</p>",
                  },
               ],
               value: "Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 8.7,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "HIGH",
                  scope: "CHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-732",
                     description: "CWE-732: Incorrect Permission Assignment for Critical Resource",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-11T00:33:03.769Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3525794",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-0064",
      datePublished: "2025-02-11T00:33:03.769Z",
      dateReserved: "2024-12-05T21:53:07.644Z",
      dateUpdated: "2025-02-18T18:07:53.865Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-38820

Vulnerability from cvelistv5

Published

2024-10-18 05:39

Modified

2024-11-29 12:04

Severity ?

3.1 (Low) - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Summary

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

References

▼	URL	Tags
	https://spring.io/security/cve-2024-38820

Impacted products

	Vendor	Product	Version
	VMware	Spring	Version: 5.3.x Version: 6.0.x Version: 6.1.x

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-38820",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-18T16:33:48.971617Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-178",
                        description: "CWE-178 Improper Handling of Case Sensitivity",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-11-05T20:15:24.631Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-11-29T12:04:41.387Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  url: "https://security.netapp.com/advisory/ntap-20241129-0003/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "affected",
               packageName: "Spring Framework",
               product: "Spring",
               vendor: "VMware",
               versions: [
                  {
                     lessThan: "5.3.41",
                     status: "affected",
                     version: "5.3.x",
                     versionType: "Enterprise Support Only",
                  },
                  {
                     lessThan: "6.0.25",
                     status: "affected",
                     version: "6.0.x",
                     versionType: "Enterprise Support Only",
                  },
                  {
                     lessThan: "6.1.14",
                     status: "affected",
                     version: "6.1.x",
                     versionType: "OSS",
                  },
               ],
            },
         ],
         datePublic: "2024-10-17T05:32:00.000Z",
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<div><div><p>The fix for CVE-2022-22968 made <code>disallowedFields</code>&nbsp;patterns in <code>DataBinder</code>&nbsp;case insensitive. However, <code>String.toLowerCase()</code>&nbsp;has some Locale dependent exceptions that could potentially result in fields not protected as expected.</p></div></div><div><br></div><br>",
                  },
               ],
               value: "The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 3.1,
                  baseSeverity: "LOW",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-10-18T05:39:05.275Z",
            orgId: "dcf2e128-44bd-42ed-91e8-88f912c1401d",
            shortName: "vmware",
         },
         references: [
            {
               url: "https://spring.io/security/cve-2024-38820",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match Exception",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "dcf2e128-44bd-42ed-91e8-88f912c1401d",
      assignerShortName: "vmware",
      cveId: "CVE-2024-38820",
      datePublished: "2024-10-18T05:39:05.275Z",
      dateReserved: "2024-06-19T22:32:06.583Z",
      dateUpdated: "2024-11-29T12:04:41.387Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2025-24876

Vulnerability from cvelistv5

Published

2025-02-11 00:37

Modified

2025-02-21 16:46

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Summary

The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting malicious payload causing High impact on confidentiality and integrity of the application

References

▼	URL	Tags
	https://me.sap.com/notes/3567974
	https://www.npmjs.com/package/@sap/approuter?activeTab=versions
	https://url.sap/sapsecuritypatchday

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP Approuter Node.js package	Version: 2.6.1 to 16.7.1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-24876",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-02-11T05:44:23.770147Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-02-21T16:46:32.934Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP Approuter Node.js package",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "2.6.1 to 16.7.1",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting malicious payload causing High impact on confidentiality and integrity of the application</p>",
                  },
               ],
               value: "The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting malicious payload causing High impact on confidentiality and integrity of the application",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-1287",
                     description: "CWE-1287: Improper Validation of Specified Type of Input",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-302",
                     description: "CWE-302: Authentication Bypass by Assumed-Immutable Data",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-02-18T19:28:24.683Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3567974",
            },
            {
               url: "https://www.npmjs.com/package/@sap/approuter?activeTab=versions",
            },
            {
               url: "https://url.sap/sapsecuritypatchday",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Authentication bypass via authorization code injection in SAP Approuter",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2025-24876",
      datePublished: "2025-02-11T00:37:40.988Z",
      dateReserved: "2025-01-27T08:57:48.546Z",
      dateUpdated: "2025-02-21T16:46:32.934Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_ncscnl

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature