CVE-2024-37172

概要

参考情報

• me.sap.com/notes/3457354 · Permissions Required
• url.sap/sapsecuritypatchday · Vendor Advisory

s4core のその他の脆弱性

• CVE-2026-24323中 6.1The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not suffic…
• CVE-2026-23688中 4.3SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation…
• CVE-2026-0505中 6.1The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This co…
• CVE-2024-39592中 6.5Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This a…
• CVE-2023-40625中 5.4S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authe…