CVE-2024-39592

6.5 mediumEPSS 0.4%

Medium (6.5) in sap. EPSS 0.4% chance of exploitation in the next 30 days.

Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This allows an attacker to read sensitive information causing high impact on the confidentiality of the application.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2024-07-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:s4core
sap:s4coreop

References

https://me.sap.com/notes/3483344
https://url.sap/sapsecuritypatchday
https://me.sap.com/notes/3483344
https://url.sap/sapsecuritypatchday

Check your stack JSON