Description (CNA)
An authenticated attacker can upload malicious file to SAP Document Builder service. When the victim accesses this file, the attacker is allowed to access, modify, or make the related information unavailable in the victim’s browser.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP Document Builder | affected S4CORE 100; affected 101; affected S4FND 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108; affected SAP_BS_FND 702; affected 731; affected 746; affected 747; affected 748 |
CWE
CWE-434
References
- https://me.sap.com/notes/3459379
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.