VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Jun 11, 2024· Updated Jun 17, 2026

CVE-2024-37176

CVE-2024-37176

Description

SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low impacts on the integrity and availability of the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • SAP/Bw\/4hana14 versions
    cpe:2.3:a:sap:bw\/4hana:300:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:sap:bw\/4hana:300:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:400:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:756:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:757:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:758:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:796:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:dw4core_200:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bw\/4hana:sap_bw_740:*:*:*:*:*:*:*
  • SAP/BW/4HANA Transformation and Data Transfer Process (DTP)llm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: DW4CORE 200

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.