CVE-2024-25645

—

CVSS 3.1

5.3 medium

EPSS

<1%p34

Published

Mar 12, 2024 (Mar 12, 2024)

Modified

Jun 17, 2026

Description

Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of the application.

Vendors: sap
Products: netweaver enterprise portal
Weakness: CWE-732
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.