CVE Feed

    Dashboard / CVE / CVE-2024-21737

    CVE-2024-21737

    In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through various layers and execute OS commands directly. By this, such user can control the behaviour of the application. This leads to considerable impact on confidentiality, integrity and availability.

    Published:Jan 9, 2024
    Last Modified:Jun 3, 2025
    EPS:Jan 9, 2024
    EPSS Score:0.00222
    CVSS Score:8.4

    Affected Products

    Vendor
    Sap
    Product
    Application Interface Framework

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High