CVE-2024-22133

6.5 mediumEPSS 0.3%

Medium (6.5) in sap fiori front end server. EPSS 0.3% chance of exploitation in the next 30 days.

SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity with no impact on Availability of the application.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2024-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:fiori_front_end_server

References

https://me.sap.com/notes/3417399
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
https://me.sap.com/notes/3417399
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364

Check your stack JSON