CVE-2024-27895

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Apr 8, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-278967.5Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect integrity.CVE-2024-278977.5Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentialitCVE-2024-278985.3SAP NetWeaver application, due to insufficient input validation, allows an attacker to send a crafted request from a vulnerable web applicatCVE-2024-278998.8Self-Registration and Modify your own profile in User Admin Application of NetWeaver AS Java does not enforce proper security requirements fCVE-2024-27905.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Accordion widget in all veCVE-2024-279005.3Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy settCVE-2024-279017.2SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provided by the users andCVE-2024-279026.1Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, reCVE-2024-279039.8OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitraryCVE-2024-279059.1** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint expoCVE-2024-279065.9Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they dCVE-2024-279077.8A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write