← CVE Intelligence

CVE-2024-39594

[CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation PUBLISHED

Description (CNA)

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause low impact on the confidentiality and integrity of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP Business Warehouse - Business Planning and Simulationaffected SAP_BW 700; affected SAP_BW 701; affected SAP_BW 702; affected SAP_BW 730; affected SAP_BW 731; affected SAP_BW 740; affected SAP_BW 750; affected SAP_BW 751; affected SAP_BW 752; affected SAP_BW 753; affected SAP_BW 754; affected SAP_BW 755; affected SAP_BW 756; affected SAP_BW 757; affected SAP_BW 758; affected SAP_BW_VIRTUAL_COMP 701

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.