What’s Vulnerable › Vulnerabilities

CVE-2024-22133: Improper Access Control in SAP Fiori Front End Server

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-12 · updated 2026-06-17
• Weakness: CWE-863

Description

SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity with no impact on Availability of the application.

Affected products

• SAP_SE SAP Fiori Front End Server: 605

References

• https://me.sap.com/notes/3417399
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
• https://me.sap.com/notes/3417399
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364

Get alerted when CVE-2024-22133 or the next vulnerability affects your stack