GCVE-VVD-NCSC-2024-228 — Vulnetix

GCVE-VVD-NCSC-2024-228

Advisory PublishedCVSS 8.1/10

Vulnetix · Advisory published May 17, 2024

SAP heeft kwetsbaarheden verholpen in diverse producten, zoals NetWeaver, Business Objects, HANA en SAP GUI.

Download JSON Open in Console

Weaknesses (CWE)

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-862Missing AuthorizationCWE-922Insecure Storage of Sensitive InformationCWE-434Unrestricted Upload of File with Dangerous TypeCWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Risk Scores

CVSS 3.1

8.1/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected Products

Vendor	Product	Versions	Platforms
sap	businessobjects_business_intelligence_platform	—	—

Aliases

CVE-2024-4138 CVE-2024-33004 CVE-2024-4139 CVE-2024-32733 CVE-2024-33009 CVE-2024-32730 CVE-2024-33007 CVE-2024-33002 CVE-2024-33006 CVE-2024-28165 CVE-2024-32731 CVE-2024-33008 CVE-2024-33000 CVE-2024-34687 CVE-2022-36364

Transitive aliases

GHSA-prf2-4xjw-553w EUVD-2024-30751 CVE-2024-34683 CVE-2024-37176 GHSA-w7f5-jrpr-5c2m VVD-CISA-2024-37176 GSD-2024-33001 CVE-2024-28164 CVE-2024-37177 CVE-2024-34684 VVD-NCSC-2024-247 VVD-CISA-2024-37177 EUVD-2024-30517 VVD-CISA-2024-32730 EUVD-2024-34987 GHSA-23gf-62w7-q77v VVD-CISA-2024-34687 GHSA-3wpq-gjx8-r7c8 EUVD-2024-34990 GHSA-9rp9-4vx9-p834 GHSA-6jcq-5j67-2qh3 EUVD-2024-30752 VVD-CISA-2024-33000 VVD-CISA-2024-33009 EUVD-2024-30749 EUVD-2024-34985 EUVD-2024-30746 EUVD-2024-30745 EUVD-2024-34983 GHSA-6qmc-84fw-65c9 VVD-CISA-2024-32733 BDU:2024-05101 NCSC-2024-0228 VVD-CISA-2024-34688 GHSA-mx49-v6wc-9vxf EUVD-2024-30518 GHSA-rpjh-2px8-r4m7 VVD-CISA-2024-28164 VVD-CISA-2024-28165 GHSA-r32p-mj73-6wq6 EUVD-2024-34982 BDU:2024-05104 VVD-CISA-2024-33008 GHSA-rwr4-vcmx-mq8w BDU:2024-05099 GHSA-2xhx-vgfw-g59c VVD-CISA-2024-34690 EUVD-2024-36483 VVD-CISA-2024-33007 EUVD-2024-30747 GHSA-f4xj-jr64-mrrf VVD-CISA-2024-33004 CVE-2024-34690 EUVD-2024-25296 VVD-CISA-2024-34684 EUVD-2024-30754 GSD-2024-28165 GHSA-v435-c8wm-qmjm EUVD-2024-30520 CGA-5w69-hjc2-pq79 EUVD-2024-30753 VVD-CISA-2024-33002 CVE-2024-34688 EUVD-2022-6428 GHSA-5jpr-j92r-8ppm GHSA-4qcf-w92c-26h6 VVD-CISA-2024-32731 GHSA-3m6r-3gw2-h96x GSD-2024-28164 GHSA-xqh8-8m3p-c72r GHSA-fwgg-ghmr-9fqp EUVD-2024-34986 VVD-CISA-2024-33006 CVE-2024-34686 GHSA-5rfc-xc58-54q3 WID-SEC-W-2024-1327 NCSC-2024-0247 BDU:2024-05097 GHSA-x685-hmwx-rrvf GHSA-qfqw-rh34-r78m EUVD-2024-32699 CVE-2024-33001 EUVD-2024-36482 VVD-CISA-2024-33001 VVD-CISA-2024-4139 BDU:2024-05100 VVD-CISA-2024-34691 EUVD-2024-25297 CVE-2024-34691 BDU:2022-05272 WID-SEC-W-2024-1107 VVD-CISA-2024-4138 VVD-CISA-2024-34683 GHSA-4h5h-v89j-3c37 BDU:2024-05090 EUVD-2024-34989 GHSA-j445-5264-j568 BDU:2024-05079 CGA-cvxh-5ph4-h33j EUVD-2024-32698 VVD-CISA-2024-34686 GHSA-xmf8-c7vj-6x2r

References

advisory

advisory

advisory

advisory

advisory

advisory

advisory

advisory

advisory

advisory

advisory

advisory

advisory

advisory

advisory

advisory

advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›