CVEvulnerability

CVE-2024-39595

5.4 MEDIUM Published 2024-07-09 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-07-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79

Description

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability allows users to modify website content and on successful exploitation, an attacker can cause low impact to the confidentiality and integrity of the application.

Affected configurations

• sap business warehouse 700 • sap business warehouse 701 • sap business warehouse 702 • sap business warehouse 730 • sap business warehouse 731 • sap business warehouse 740 • sap business warehouse 750 • sap business warehouse 751 • sap business warehouse 752 • sap business warehouse 753 • sap business warehouse 754 • sap business warehouse 755 • sap business warehouse 756 • sap business warehouse 757 • sap business warehouse 758 • sap business warehouse virtual comp 701

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References