← CVE Intelligence

CVE-2024-34689

[CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services) PUBLISHED

Description (CNA)

WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP Business Workflow (WebFlow Services)affected SAP_BASIS 700; affected SAP_BASIS 701; affected SAP_BASIS 702; affected SAP_BASIS 731; affected SAP_BASIS 740; affected SAP_BASIS 750; affected SAP_BASIS 751; affected SAP_BASIS 752; affected SAP_BASIS 753; affected SAP_BASIS 754; affected SAP_BASIS 755; affected SAP_BASIS 756; affected SAP_BASIS 757; affected SAP_BASIS 758

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.