CVE-2024-47592

—

CVSS 3.1

5.3 medium

EPSS

<1%p23

Published

Nov 12, 2024 (Nov 12, 2024)

Modified

Jun 17, 2026

Description

SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality in order to identify the legitimate user IDs. This has an impact on confidentiality but not on integrity or availability.

Weakness: CWE-307
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.