CVE-2024-39600: fallo de gravedad media en SAP_SE SAP GUI for Windows
[CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for Windows
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5epss 0.1%
Under certain conditions, the memory of SAP GUI
for Windows contains the password used to log on to an SAP system, which might
allow an attacker to get hold of the password and impersonate the affected
user. As a result, it has a high impact on the confidentiality but there is no
impact on the integrity and availability.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N
Productos afectados
SAP_SE · SAP GUI for WindowsCVEs relacionadas — SAP_SE SAP GUI for Windows
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-32113HIGHInformation Disclosure vulnerability in SAP GUI for WindowsEPSS 0.5%CVE-2025-42943MEDIUMInformation Disclosure in SAP GUI for WindowsEPSS 0.3%CVE-2025-0055MEDIUMInformation Disclosure vulnerability in SAP GUI for WindowsEPSS 0.2%CVE-2025-43005MEDIUMInformation Disclosure vulnerability in SAP GUI for WindowsEPSS 0.2%CVE-2025-24870MEDIUMInsecure Key & Secret Management vulnerability in SAP GUI for WindowsEPSS 0.2%CVE-2025-42979MEDIUMInsecure Key & Secret Management vulnerability in SAP GUI for WindowsEPSS 0.1%