CVE-2024-24739

Missing authorization check in SAP BAM (Bank Account Management)

State: Published
Severity: 6.3 Medium
Published: Feb 13, 2024
Updated: May 9, 2025
Reserved: Jan 29, 2024

Description

SAP Bank Account Management (BAM) allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application.

Scores

CVSS	Score	Vector	Source
3.1	6.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	sap

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
SAP BAM (Bank Account Management)SAP_SE	SAP_FIN 618Affected SAP_FIN 730Affected S4CORE 100Affected 101Affected

References

https://me.sap.com/notes/2637727
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.