CVE-2024-39600: falha de média gravidade em SAP_SE SAP GUI for Windows
[CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for Windows
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5epss 0.1%
Under certain conditions, the memory of SAP GUI
for Windows contains the password used to log on to an SAP system, which might
allow an attacker to get hold of the password and impersonate the affected
user. As a result, it has a high impact on the confidentiality but there is no
impact on the integrity and availability.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N
Produtos afetados
SAP_SE · SAP GUI for WindowsCVEs relacionadas — SAP_SE SAP GUI for Windows
No mesmo produto, das mais perigosas para as menos.
CVE-2023-32113HIGHInformation Disclosure vulnerability in SAP GUI for WindowsEPSS 0.5%CVE-2025-42943MEDIUMInformation Disclosure in SAP GUI for WindowsEPSS 0.3%CVE-2025-0055MEDIUMInformation Disclosure vulnerability in SAP GUI for WindowsEPSS 0.2%CVE-2025-43005MEDIUMInformation Disclosure vulnerability in SAP GUI for WindowsEPSS 0.2%CVE-2025-24870MEDIUMInsecure Key & Secret Management vulnerability in SAP GUI for WindowsEPSS 0.2%CVE-2025-42979MEDIUMInsecure Key & Secret Management vulnerability in SAP GUI for WindowsEPSS 0.1%