← CVE Intelligence

CVE-2024-34692

[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now PUBLISHED

Description (CNA)

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited impact on confidentiality and Integrity of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP Enable Nowaffected WPB_MANAGER_CE 10; affected WPB_MANAGER_HANA 10; affected ENABLE_NOW_CONSUMP_DEL 1704

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.