Medium severity5.0NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026
CVE-2024-39598
CVE-2024-39598
Description
SAP CRM (WebClient UI Framework) allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17cpe:2.3:a:sap:customer_relationship_management_s4fnd:102:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:102:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:103:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:104:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:105:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:106:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:107:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_s4fnd:108:*:*:*:*:*:*:*
cpe:2.3:a:sap:customer_relationship_management_webclient_ui:701:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:701:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:731:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:746:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:747:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:748:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:800:*:*:*:*:*:*:*
- cpe:2.3:a:sap:customer_relationship_management_webclient_ui:801:*:*:*:*:*:*:*
- Range: S4FND 102
Patches
Vulnerability mechanics
References
2- url.sap/sapsecuritypatchdaynvdVendor Advisory
- me.sap.com/notes/3467377nvdPermissions Required
News mentions
0No linked articles in our index yet.