CVE-2024-47592

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality in order to identify the legitimate user IDs. This has an impact on confidentiality but not on integrity or availability.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-307

Affected software

VendorProductVersions
SAP_SESAP NetWeaver Application Server Java (Logon Application)SERVERCORE 7.5
sapnetweaver_application_server_java7.5

References

Timeline

Published
Nov 12, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-475934.3SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise CVE-2024-475945.4SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability iCVE-2024-475957.1An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploCVE-2024-475967.5GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_CVE-2024-475979.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samCVE-2024-475989.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_meCVE-2024-475997.5GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered inCVE-2024-47606.3A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U micCVE-2024-476009.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channCVE-2024-476017.5GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered inCVE-2024-476027.5GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered inCVE-2024-476037.5GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in
CVE-2024-47592: Medium severity, CVSS 5.3 | Vulnix