CVE-2024-44114

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

SAP NetWeaver Application Server for ABAP and ABAP Platform allow users with high privileges to execute a program that reveals data over the network. This results in a minimal impact on confidentiality of the application.

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published: Sep 10, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-441154.3The RFC enabled function module allows a low privileged user to add URLs to any user's workplace favourites. This vulnerability could be uti CVE-2024-441164.3The RFC enabled function module allows a low privileged user to add any workbook to any user's workplace favourites. This vulnerability coul CVE-2024-441175.4The RFC enabled function module allows a low privileged user to perform various actions, such as modifying the URLs of any user's favourite CVE-2024-44122.7The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code CVE-2024-441204.7SAP NetWeaver Enterprise Portal is vulnerable to reflected cross site scripting due to insufficient encoding of user-controlled input. An un CVE-2024-441214.3Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would otherw CVE-2024-441228.8A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, macOS CVE-2024-441232.3A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. A malicious a CVE-2024-441246.5This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A malicious Bluetooth input device CVE-2024-441255.5The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. A malicious application may be abl CVE-2024-441267.8The issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS CVE-2024-441275.3This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private B