CVE-2024-34692lowCWE-434

CVE-2024-34692: falha de baixa gravidade em SAP_SE SAP Enable Now

[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP Enable Now

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.3epss 0.2%
Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited impact on confidentiality and Integrity of the application.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Produtos afetados
SAP_SE · SAP Enable Now
CVEs relacionadas — SAP_SE SAP Enable Now

No mesmo produto, das mais perigosas para as menos.

CVE-2024-32730MEDIUMMissing authorization check in SAP Enable Now ManagerEPSS 0.6%CVE-2023-36919MEDIUMInformation Disclosure in SAP Enable NowEPSS 0.5%CVE-2023-36918MEDIUMCross-Site Scripting vulnerability in SAP Enable NowEPSS 0.4%CVE-2023-33988MEDIUMCross-Site Scripting vulnerability in SAP Enable NowEPSS 0.4%CVE-2024-39596MEDIUM[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable NowEPSS 0.3%