CVE-2023-24528

MEDIUM

SAP Fiori apps for Travel Management <600 - Info Disclosure

Title source: llm
STIX 2.1

Description

SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally exposed over the network and successful exploitation can lead to exposure of data like travel documents.

References (2)

Core 2

Scores

CVSS v3 6.5
EPSS 0.0021
EPSS Percentile 43.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-862
Status published
Products (1)
sap/fiori 600
Published Feb 14, 2023
Tracked Since Feb 18, 2026