CVE-2024-24740

Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (SAP Kernel)

State: Published
Severity: 5.3 Medium
Published: Feb 13, 2024
Updated: May 9, 2025
Reserved: Jan 29, 2024

Description

SAP NetWeaver Application Server (ABAP) - versions KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.93, KERNEL 7.94, KRNL64UC 7.53, under certain conditions, allows an attacker to access information which could otherwise be restricted with low impact on confidentiality of the application.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	sap

Weaknesses

CWE-732 Incorrect Permission Assignment for Critical Resource

Affected Products

Product	Versions
SAP NetWeaver Application Server ABAP (SAP Kernel)SAP_SE	KERNEL 7.53Affected KERNEL 7.54Affected KERNEL 7.77Affected KERNEL 7.85Affected KERNEL 7.89Affected KERNEL 7.93Affected KERNEL 7.94Affected KRNL64UC 7.53Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.