CWE-914 · 3 records

Improper Control of Dynamically-Identified Variables

CVEs in this class

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2024-54198No exploit	Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAPsap_se · sap netweaver application server abap · CWE-914	High8.5	—	0.6%	Dec 9, 2024
32Monitor	CVE-2024-24914No exploit	Authenticated Gaia users can inject code or commands by global variables through special HTTP requests.checkpoint · gaia os · CWE-914	High8.0	—	0.4%	Nov 7, 2024
30Monitor	CVE-2023-33175No exploit	ToUI allows user-specific variables to be shared between userstoui project · toui · CWE-914 Pre-auth	High7.5	—	0.6%	May 30, 2023

CVE-2024-54198
34Monitor
Information Disclosure vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP
HighCVSS 8.5No exploitEPSS 0%
sap_se · sap netweaver application server abapDec 9, 2024
CVE-2024-24914
32Monitor
Authenticated Gaia users can inject code or commands by global variables through special HTTP requests.
HighCVSS 8.0No exploitEPSS 0%
checkpoint · gaia osNov 7, 2024
CVE-2023-33175
30Monitor
ToUI allows user-specific variables to be shared between users
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
toui project · touiMay 30, 2023