CVSS 3.1
4.2 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:NCVE-2024-39600
Medium (4.2) in sap gui for windows. EPSS 0.1% chance of exploitation in the next 30 days.
Under certain conditions, the memory of SAP GUI
for Windows contains the password used to log on to an SAP system, which might
allow an attacker to get hold of the password and impersonate the affected
user. As a result, it has a high impact on the confidentiality but there is no
impact on the integrity and availability.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sap:gui_for_windows