What’s Vulnerable › Vulnerabilities
CVE-2024-45284: Missing authorization check in SAP Student Life Cycle Management (SLcM)
- Severity: low (CVSS 2.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-09-10 · updated 2026-06-17
- Weakness: CWE-862
Description
An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integrity of the application.
Affected products
- SAP_SE SAP Student Life Cycle Management (SLcM): 617, 618, 800, 802, 803, 804 (+4)
References
Get alerted when CVE-2024-45284 or the next vulnerability affects your stack