CVE-2024-44115

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The RFC enabled function module allows a low privileged user to add URLs to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces, and nodes. There is low impact on integrity of the application

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Sep 10, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-441164.3The RFC enabled function module allows a low privileged user to add any workbook to any user's workplace favourites. This vulnerability coul CVE-2024-441175.4The RFC enabled function module allows a low privileged user to perform various actions, such as modifying the URLs of any user's favourite CVE-2024-44122.7The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code CVE-2024-441204.7SAP NetWeaver Enterprise Portal is vulnerable to reflected cross site scripting due to insufficient encoding of user-controlled input. An un CVE-2024-441214.3Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would otherw CVE-2024-441228.8A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, macOS CVE-2024-441232.3A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. A malicious a CVE-2024-441246.5This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A malicious Bluetooth input device CVE-2024-441255.5The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. A malicious application may be abl CVE-2024-441267.8The issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS CVE-2024-441275.3This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private B CVE-2024-441285.5This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS