Vulnerabilities > CVE-2024-37172 - Unspecified vulnerability in SAP S4Core 107/108

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
LOW
network
low complexity
sap

Summary

SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality and availability but there is no impact on the integrity.

Vulnerable Configurations

Part Description Count
Application
Sap
3