CVE-2024-39595

Published: Jul 9, 2024Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: CNA (Secondary)

Description

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability allows users to modify website content and on successful exploitation, an attacker can cause low impact to the confidentiality and integrity of the application.

Affected (16)

Products: Sap: Business Warehouse, Business Warehouse Virtual Comp

Sap

2 products

Business Warehouse

Business Warehouse Virtual Comp

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Sap Business Warehouse	Version 700
Sap Business Warehouse	Version 701
Sap Business Warehouse	Version 702
Sap Business Warehouse	Version 730
Sap Business Warehouse	Version 731
Sap Business Warehouse	Version 740
Sap Business Warehouse	Version 750
Sap Business Warehouse	Version 751
Sap Business Warehouse	Version 752
Sap Business Warehouse	Version 753
Sap Business Warehouse	Version 754
Sap Business Warehouse	Version 755
Sap Business Warehouse	Version 756
Sap Business Warehouse	Version 757
Sap Business Warehouse	Version 758
Sap Business Warehouse Virtual Comp	Version 701