CVE-2024-45282

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications leading to integrity violations. Confidentiality and Availability are not impacted.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-650

Affected software

No affected versions have been published.

Timeline

Published: Oct 8, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-452836.0SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password CVE-2024-452842.4An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result i CVE-2024-452855.4The RFC enabled function module allows a low privileged user to perform denial of service on any user and also change or delete favourite no CVE-2024-452866.5Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Production and Revenue Ac CVE-2024-452877.5A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than r CVE-2024-452888.4A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.CVE-2024-452897.5The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment va CVE-2024-45295.0The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in use CVE-2024-452907.5PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file whic CVE-2024-452918.8PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file that CVE-2024-452925.4PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. `\PhpOffice\PhpSpreadsheet\Writer\Html` does not sanitize "j CVE-2024-452937.5PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The security scanner responsible for preventing XXE attacks