CVE-2024-34689
5.0
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Exploitability: 3.1 / Impact: 1.4
Source: NVD
Description
WebFlow Services of SAP Business Workflow allows
an authenticated attacker to enumerate accessible HTTP endpoints in the
internal network by specially crafting HTTP requests. On successful
exploitation this can result in information disclosure. It has no impact on
integrity and availability of the application.
Affected (15)
Products: Sap: Business Workflow, Sap Basis
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| Version 700 |
References (4)
Timeline
No history available yet.