CVE-2024-39594
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: CNA (Secondary)
Description
SAP Business Warehouse - Business Planning and
Simulation application does not sufficiently encode user controlled inputs,
resulting in Reflected Cross-Site Scripting (XSS) vulnerability. After
successful exploitation, an attacker can cause low impact on the confidentiality
and integrity of the application.
Affected (16)
Products: Sap: Business Warehouse, Business Warehouse Virtual Comp
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 700 | |
| Version 701 |
References (4)
Timeline
No history available yet.