CVE-2024-34692lowCWE-434

CVE-2024-34692: fallo de gravedad baja en SAP_SE SAP Enable Now

[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SAP Enable Now

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 3.3epss 0.2%
Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited impact on confidentiality and Integrity of the application.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Productos afectados
SAP_SE · SAP Enable Now
CVEs relacionadas — SAP_SE SAP Enable Now

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-32730MEDIUMMissing authorization check in SAP Enable Now ManagerEPSS 0.6%CVE-2023-36919MEDIUMInformation Disclosure in SAP Enable NowEPSS 0.5%CVE-2023-36918MEDIUMCross-Site Scripting vulnerability in SAP Enable NowEPSS 0.4%CVE-2023-33988MEDIUMCross-Site Scripting vulnerability in SAP Enable NowEPSS 0.4%CVE-2024-39596MEDIUM[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable NowEPSS 0.3%