CVE-2024-25645: Information Disclosure vulnerability in SAP NetWeaver (Enterprise Portal)
First published: Tue Mar 12 2024(Updated: )
Under certain condition SAP NetWeaver (Enterprise Portal) - version 7.50 allows an attacker to access information which would otherwise be restricted causing low impact on confidentiality of the application and with no impact on Integrity and Availability of the application.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver (Enterprise Portal) | ||
| SAP NetWeaver (Enterprise Portal) | =7.50 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-25645?
CVE-2024-25645 has a low impact on confidentiality, with no impact on integrity and availability.
How do I fix CVE-2024-25645?
To address CVE-2024-25645, update your SAP NetWeaver (Enterprise Portal) to the latest version as recommended by SAP.
What versions of SAP are affected by CVE-2024-25645?
CVE-2024-25645 specifically affects SAP NetWeaver (Enterprise Portal) version 7.50.
What kind of information is exposed due to CVE-2024-25645?
CVE-2024-25645 allows unauthorized access to restricted information within SAP NetWeaver (Enterprise Portal).
Is there a workaround for CVE-2024-25645 if I cannot update immediately?
While an immediate update is recommended, implementing strict access controls may mitigate some exposure related to CVE-2024-25645.
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/description
- agent/source
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- vendor/sap
- canonical/sap netweaver (enterprise portal)
- version/sap netweaver (enterprise portal)/7.50