Threat Investigation
Request a demo

CVE-2024-21737

High

Description

In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through various layers and execute OS commands directly. By this, such user can control the behaviour of the application. This leads to considerable impact on confidentiality, integrity and availability.

SeverityHigh
CVSS8.4
Exploit probability—
ProductSap Application Interface Framework
PublishedJan 9, 2024
First seenJan 9, 2024
Weakness typeCWE-94Code injection

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
sap application_interface_framework702—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.