Cyber Resilience

CVE-2024-45282

Medium

Published: 08 October 2024

Published
08 October 2024
Modified
14 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score 0.0027 50.3th percentile
Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-45282 is a medium-severity Trusting HTTP Permission Methods on the Server Side (CWE-650) vulnerability in Sap S\/4 Hana. Its CVSS base score is 4.3 (Medium).

Operationally, ranked in the top 49.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications leading to…

more

integrity violations. Confidentiality and Availability are not impacted.

CWE(s)
CWE-650

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

sap
s\/4 hana
102, 103, 104, 105, 106

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References