CVE-2024-39595mediumCWE-79

CVE-2024-39595: falha de média gravidade em SAP_SE SAP Business Warehouse - Business…

[CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP Business Warehouse - Business Planning and Simulation

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.4epss 0.2%
SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability allows users to modify website content and on successful exploitation, an attacker can cause low impact to the confidentiality and integrity of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
SAP_SE · SAP Business Warehouse - Business Planning and Simulation
CVEs relacionadas — SAP_SE SAP Business Warehouse - Business…

No mesmo produto, das mais perigosas para as menos.

CVE-2024-39594MEDIUM[CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and SimulationEPSS 0.3%