GCVE-VVD-NCSC-2024-247

Advisory PublishedCVSS 8.1/10

Vulnetix · Advisory published June 11, 2024

SAP heeft kwetsbaarheden verholpen in diverse SAP producten, zoals Business Objects, HANA, CRM en NetWeaver.

Weaknesses (CWE)

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-400Uncontrolled Resource ConsumptionCWE-434Unrestricted Upload of File with Dangerous TypeCWE-862Missing AuthorizationCWE-200Exposure of Sensitive Information to an Unauthorized Actor

Risk Scores

CVSS 3.1

8.1/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected Products

Vendor	Product	Versions	Platforms
sap_se	sap_financial_consolidation	—	—
sap	financial_consolidation	—	—
sap_se	sap_netweaver_as_java	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap	netweaver_application_server_abap	—	—
sap_se	sap_document_builder	—	—
sap_se	sap_s_4hana__manage_incoming_payment_files_	—	—
sap_se	sap_crm_webclient_ui	—	—
sap_se	sap_bw_4hana_transformation_and_data_transfer_process	—	—
sap_se	sap_student_life_cycle_management	—	—
sap_se	sap_businessobjects_business_intelligence_platform	—	—

Aliases

CVE-2024-34688 CVE-2024-34683 CVE-2024-37177 CVE-2024-34690 CVE-2024-34684 CVE-2024-33001 CVE-2024-37176 CVE-2024-28164 CVE-2024-34686 CVE-2024-34691

Transitive aliases

VVD-CISA-2024-32733 NCSC-2024-0228 EUVD-2024-30517 VVD-CISA-2024-4138 CVE-2022-36364 EUVD-2024-30518 VVD-CISA-2024-33004 GHSA-f4xj-jr64-mrrf CVE-2024-33007 VVD-CISA-2024-33000 GHSA-r32p-mj73-6wq6 GHSA-23gf-62w7-q77v EUVD-2024-30746 EUVD-2024-30752 GHSA-w7f5-jrpr-5c2m GHSA-xqh8-8m3p-c72r GHSA-rpjh-2px8-r4m7 GHSA-rwr4-vcmx-mq8w BDU:2024-05100 VVD-CISA-2024-32731 VVD-CISA-2024-33006 VVD-CISA-2024-34688 GHSA-2xhx-vgfw-g59c VVD-CISA-2024-37177 GHSA-6qmc-84fw-65c9 BDU:2024-05097 EUVD-2024-36482 EUVD-2024-34990 GHSA-6jcq-5j67-2qh3 EUVD-2024-30745 VVD-CISA-2024-34686 CVE-2024-33000 CVE-2024-32730 CVE-2024-4139 VVD-CISA-2024-34687 VVD-CISA-2024-33007 EUVD-2024-30751 VVD-CISA-2024-4139 VVD-CISA-2024-34690 GHSA-5jpr-j92r-8ppm EUVD-2024-25297 WID-SEC-W-2024-1327 VVD-NCSC-2024-228 GHSA-9rp9-4vx9-p834 VVD-CISA-2024-33002 EUVD-2024-34983 CVE-2024-34687 CVE-2024-33008 GHSA-xmf8-c7vj-6x2r EUVD-2024-25296 EUVD-2024-34989 CVE-2024-4138 GHSA-mx49-v6wc-9vxf VVD-CISA-2024-34691 EUVD-2024-34987 BDU:2024-05104 EUVD-2024-36483 EUVD-2024-30753 CVE-2024-32733 VVD-CISA-2024-33008 CGA-5w69-hjc2-pq79 CGA-cvxh-5ph4-h33j GHSA-3m6r-3gw2-h96x GHSA-4h5h-v89j-3c37 BDU:2024-05090 GHSA-x685-hmwx-rrvf CVE-2024-33006 GHSA-5rfc-xc58-54q3 GHSA-4qcf-w92c-26h6 BDU:2024-05099 BDU:2024-05079 EUVD-2024-34982 VVD-CISA-2024-37176 GSD-2024-28165 GSD-2024-33001 EUVD-2024-30754 EUVD-2024-32699 CVE-2024-33009 EUVD-2022-6428 GHSA-v435-c8wm-qmjm BDU:2024-05101 CVE-2024-28165 CVE-2024-33002 VVD-CISA-2024-28165 GHSA-3wpq-gjx8-r7c8 EUVD-2024-30749 VVD-CISA-2024-33001 VVD-CISA-2024-33009 EUVD-2024-30747 VVD-CISA-2024-34684 BDU:2022-05272 EUVD-2024-34986 EUVD-2024-34985 NCSC-2024-0247 GHSA-j445-5264-j568 GHSA-prf2-4xjw-553w CVE-2024-32731 VVD-CISA-2024-32730 VVD-CISA-2024-28164 EUVD-2024-30520 EUVD-2024-32698 VVD-CISA-2024-34683 GHSA-fwgg-ghmr-9fqp GSD-2024-28164 CVE-2024-33004 WID-SEC-W-2024-1107 GHSA-qfqw-rh34-r78m

References

advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON