Vulnerability Details CVE-2024-37179
SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of the application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.5%
CVSS Severity
CVSS v3 Score 7.7
Products affected by CVE-2024-37179
-
cpe:2.3:a:sap:businessobjects_business_intelligence:2025
-
cpe:2.3:a:sap:businessobjects_business_intelligence:420
-
cpe:2.3:a:sap:businessobjects_business_intelligence:430