What’s Vulnerable › Vulnerabilities
CVE-2024-41736: Information Disclosure vulnerability in SAP Permit to Work
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-08-13 · updated 2026-06-17
- Weakness: CWE-200
Description
Under certain conditions SAP Permit to Work allows an authenticated attacker to access information which would otherwise be restricted causing low impact on the confidentiality of the application.
Affected products
- SAP_SE SAP Permit to Work: uis4hop1_800, uis4hop1_900
References
Get alerted when CVE-2024-41736 or the next vulnerability affects your stack