CVE-2024-34683

Published: Jun 11, 2024Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Exploitability: 2.3 / Impact: 3.7

Source: NVD

Description

An authenticated attacker can upload malicious file to SAP Document Builder service. When the victim accesses this file, the attacker is allowed to access, modify, or make the related information unavailable in the victim’s browser.

Affected (14)

Products: Sap: Document Builder

Sap

1 product

Document Builder

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Sap Document Builder	Version 101
Sap Document Builder	Version 103
Sap Document Builder	Version 104
Sap Document Builder	Version 105
Sap Document Builder	Version 106
Sap Document Builder	Version 107
Sap Document Builder	Version 108
Sap Document Builder	Version 731
Sap Document Builder	Version 746
Sap Document Builder	Version 747
Sap Document Builder	Version 748
Sap Document Builder	Version s4core_100
Sap Document Builder	Version s4fnd_102
Sap Document Builder	Version sap_bs_fnd_702