CVE-2024-34683: medium-severity vulnerability in SAP_SE SAP Document Builder
Unrestricted file upload in SAP Document Builder (HTTP service)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.2%
An authenticated attacker can upload malicious
file to SAP Document Builder service. When the victim accesses this file, the
attacker is allowed to access, modify, or make the related information
unavailable in the victim’s browser.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
SAP_SE · SAP Document BuilderRelated CVEs — SAP_SE SAP Document Builder
In the same product, most dangerous first.