Medium severity4.3NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026
CVE-2024-37175
CVE-2024-37175
Description
SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to access some sensitive information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16cpe:2.3:a:sap:customer_relationship_management_s4fnd:102:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:102:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:103:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:104:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:105:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:106:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:107:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:108:*:*:*:*:*:*:*
cpe:2.3:a:sap:customer_relationship_management_webclient_ui:701:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:701:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:731:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:746:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:747:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:748:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:800:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:801:*:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: S4FND 102
Patches
Vulnerability mechanics
References
2- url.sap/sapsecuritypatchdaynvdVendor Advisory
- me.sap.com/notes/3467377nvdPermissions Required
News mentions
0No linked articles in our index yet.