Unrated severityNVD Advisory· Published Feb 14, 2023· Updated Mar 20, 2025

CVE-2023-24528

Description

SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally exposed over the network and successful exploitation can lead to exposure of data like travel documents.

Affected products

SAP/Fiori apps for Travel Managementllm-create2 versions
600+ 1 more
- (no CPE)range: 600
- (no CPE)range: 600

Patches

Vulnerability mechanics

References

launchpad.support.sap.commitre
www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000