CVE-2024-39599: [CVE-2024-39599] Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform

Published Jul 9, 2024

Updated

Due to a Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform, a developer can bypass the configured malware scanner API because of a programming error. This leads to a low impact on the application's confidentiality, integrity, and availability.

Affected Software

18 affected components

SAP NetWeaver Application Server for ABAP

SAP ABAP Platform

SAP SAP BASIS=700

SAP SAP BASIS=701

SAP SAP BASIS=702

SAP SAP BASIS=731

SAP SAP BASIS=740

SAP SAP BASIS=750

SAP SAP BASIS=751

SAP SAP BASIS=752

SAP SAP BASIS=753

SAP SAP BASIS=754

SAP SAP BASIS=755

SAP SAP BASIS=756

SAP SAP BASIS=757

SAP SAP BASIS=758

SAP SAP BASIS=795

SAP SAP BASIS=796

Remediation

Patch Available

https://url.sap/sapsecuritypatchday

Event History

Jul 9, 2024

CVE Published

via MITRE·04:24 AM

Data Sourced

via MITRE·04:24 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-39599?

CVE-2024-39599 is categorized as a low severity vulnerability.

How do I fix CVE-2024-39599?

To mitigate CVE-2024-39599, ensure you apply the latest patches available from SAP for your NetWeaver Application Server for ABAP and ABAP Platform.

What type of impact does CVE-2024-39599 have?

CVE-2024-39599 has a low impact on the application's confidentiality, integrity, and availability.

What products are affected by CVE-2024-39599?

CVE-2024-39599 affects SAP NetWeaver Application Server for ABAP and SAP ABAP Platform.

Is there a workaround for CVE-2024-39599?

Currently, there is no official workaround specified for CVE-2024-39599 aside from applying the necessary updates.