CVE-2024-27899
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Security misconfiguration vulnerability in SAP NetWeaver AS Java User Management Engine
Self-Registration and Modify your own profile in User Admin Application of NetWeaver AS Java does not enforce proper security requirements for the content of the newly defined security answer. This can be leveraged by an attacker to cause profound impact on confidentiality and low impact on both integrity and availability.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP NetWeaver AS Java User Management Engine
- Vendor
- SAP_SE
- Product
- SAP NetWeaver AS Java User Management Engine
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| SERVERCORE 7.50 | affected | Unavailable | Unavailable | Unavailable | None listed |
| J2EE-APPS 7.50 | affected | Unavailable | Unavailable | Unavailable | None listed |
| UMEADMIN 7.50 | affected | Unavailable | Unavailable | Unavailable | None listed |