CVE-2024-37176: SAP bw/4hana

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low impacts on the integrity and availability of the application.

Affected products

• SAP bw/4hana: version 300 only; version 400 only; version 750 only; version 751 only; version 752 only; version 753 only; …

Published 2024-06-11. Last modified 2026-06-17.