CVE-2024-44121: Information Disclosure in SAP S/4 HANA (Statutory Reports)
Published Sep 10, 2024
·Updated
Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would otherwise be restricted. The vulnerability could expose internal user data that should remain confidential. It does not impact the integrity and availability of the application
Affected Software
1 affected component
SAP S/4 HANA
Event History
Sep 10, 2024
CVE Published
via MITRE·04:28 AM
Data Sourced
via MITRE·04:28 AM
DescriptionSeverity
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-44121?
CVE-2024-44121 is classified as a medium severity vulnerability.
2
How do I fix CVE-2024-44121?
To fix CVE-2024-44121, it is recommended to implement the latest security patches provided by SAP for S/4 HANA.
3
What software is affected by CVE-2024-44121?
CVE-2024-44121 affects SAP S/4 HANA under certain conditions.
4
What information does CVE-2024-44121 expose?
CVE-2024-44121 may expose internal user data that should remain confidential.
5
Who can exploit CVE-2024-44121?
An attacker with basic privileges can potentially exploit CVE-2024-44121 to access restricted information.