CVE-2024-39594
Severity CVSS v4.0:
Pending analysis
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
09/07/2024
Last modified:
29/10/2025
Description
SAP Business Warehouse - Business Planning and<br />
Simulation application does not sufficiently encode user controlled inputs,<br />
resulting in Reflected Cross-Site Scripting (XSS) vulnerability. After<br />
successful exploitation, an attacker can cause low impact on the confidentiality<br />
and integrity of the application.
Impact
Base Score 3.x
6.10
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:701:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:702:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:751:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:752:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:753:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:754:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:755:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:756:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:757:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:business_warehouse:758:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page