GCVE-110-NCSC-2024-228

Advisory PublishedCVSS 8.1/10

Vulnetix · Advisory published May 17, 2024

SAP heeft kwetsbaarheden verholpen in diverse producten, zoals NetWeaver, Business Objects, HANA en SAP GUI.

Weaknesses (CWE)

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-862Missing AuthorizationCWE-922Insecure Storage of Sensitive InformationCWE-434Unrestricted Upload of File with Dangerous TypeCWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Risk Scores

CVSS 3.1

8.1/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected Products

Vendor	Product	Versions	Platforms
sap	businessobjects_business_intelligence_platform	—	—

Aliases

CVE-2022-36364 CVE-2024-28165 CVE-2024-32730 CVE-2024-32731 CVE-2024-32733 CVE-2024-33000 CVE-2024-33002 CVE-2024-33004 CVE-2024-33006 CVE-2024-33007 CVE-2024-33008 CVE-2024-33009 CVE-2024-34687 CVE-2024-4138 CVE-2024-4139

References

advisory

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON