CVE Feed

    Dashboard / CVE / CVE-2024-33005

    CVE-2024-33005

    Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a high impact on the integrity and availability of the applications.

    Published:Aug 13, 2024
    Last Modified:Sep 12, 2024
    EPS:Aug 13, 2024
    EPSS Score:0.00032
    CVSS Score:6.3

    Affected Products

    Vendor
    Sap
    Product
    Content Server
    Vendor
    Sap
    Product
    Netweaver Abap
    Vendor
    Sap
    Product
    Netweaver Java
    Vendor
    Sap
    Product
    Web Dispatcher

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-862 Missing Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2026-76968 (CVSS 6.5) — SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileg…
    CVE-2025-42877 (CVSS 7.5) — SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server allow an unauthenticated user…
    CVE-2023-40309 (CVSS 9.8) — SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong aut…
    CVE-2023-40308 (CVSS 7.5) — SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open por…
    CVE-2023-26457 (CVSS 6.1) — SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Sit…
    CVE-2022-22536 (CVSS 10) — SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Serve…
    CVE-2015-4157 (CVSS 5) — SAP Content Server allows remote attackers to cause a denial of service (service termination) via unspecified …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High