CVE-2024-28163: Information Disclosure vulnerability in SAP NetWeaver Process Integration (Support Web Pages)
Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration (PI) - versions 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28163?
CVE-2024-28163 is classified as a low severity vulnerability affecting the confidentiality of the affected application.
How do I fix CVE-2024-28163?
To mitigate CVE-2024-28163, it is recommended to apply the latest patches and updates provided by SAP for NetWeaver Process Integration.
What versions of SAP NetWeaver Process Integration are affected by CVE-2024-28163?
CVE-2024-28163 affects SAP NetWeaver Process Integration versions 7.50.
What impact does CVE-2024-28163 have on the application?
CVE-2024-28163 impacts confidentiality by allowing access to information that should be restricted, but has no impact on integrity or availability.
Who is vulnerable to CVE-2024-28163?
Organizations using SAP NetWeaver Process Integration 7.50 may be vulnerable to CVE-2024-28163 if they have not implemented the necessary security measures.