CVE-2024-45282mediumCWE-650

CVE-2024-45282: fallo de gravedad media en SAP_SE SAP S/4 HANA (Manage Bank Statements)

HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SAP S/4HANA

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.3epss 0.3%
Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications leading to integrity violations. Confidentiality and Availability are not impacted.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Productos afectados
SAP_SE · SAP S/4 HANA (Manage Bank Statements)