SAP Bank Account Management vulnerabilities

3 CVEs affecting SAP Bank Account Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-33000, published 2024-05-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-0023, published 2023-01-10. Medium severity, CVSS 5.7. EPSS: 0.5% chance of exploitation in the next 30 days. In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log…
CVE-2024-33000, published 2024-05-14. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. SAP Bank Account Management does not perform necessary authorization check for an authorized user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality to the…
CVE-2024-24739, published 2024-02-13. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. SAP Bank Account Management (BAM) allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and…