← CVE Intelligence

CVE-2024-39595

[CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation PUBLISHED

Description (CNA)

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability allows users to modify website content and on successful exploitation, an attacker can cause low impact to the confidentiality and integrity of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP Business Warehouse - Business Planning and Simulationaffected SAP_BW 700; affected SAP_BW 701; affected SAP_BW 702; affected SAP_BW 730; affected SAP_BW 731; affected SAP_BW 740; affected SAP_BW 750; affected SAP_BW 751; affected SAP_BW 752; affected SAP_BW 753; affected SAP_BW 754; affected SAP_BW 755; affected SAP_BW 756; affected SAP_BW 757; affected SAP_BW 758; affected SAP_BW_VIRTUAL_COMP 701

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.