Description
Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.
References (2)
Core 2
Core References
Permissions Required
https://me.sap.com/notes/3425682
Scores
CVSS v3
5.3
EPSS
0.0037
EPSS Percentile
59.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-732
Status
published
Products (1)
sap/netweaver
7.50
Published
Mar 12, 2024
Tracked Since
Feb 18, 2026