Vulnerability Details CVE-2024-39594
SAP Business Warehouse - Business Planning and
Simulation application does not sufficiently encode user controlled inputs,
resulting in Reflected Cross-Site Scripting (XSS) vulnerability. After
successful exploitation, an attacker can cause low impact on the confidentiality
and integrity of the application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.1%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2024-39594
-
cpe:2.3:a:sap:business_warehouse:700
-
cpe:2.3:a:sap:business_warehouse:701
-
cpe:2.3:a:sap:business_warehouse:702
-
cpe:2.3:a:sap:business_warehouse:730
-
cpe:2.3:a:sap:business_warehouse:731
-
cpe:2.3:a:sap:business_warehouse:740
-
cpe:2.3:a:sap:business_warehouse:750
-
cpe:2.3:a:sap:business_warehouse:751
-
cpe:2.3:a:sap:business_warehouse:752
-
cpe:2.3:a:sap:business_warehouse:753
-
cpe:2.3:a:sap:business_warehouse:754
-
cpe:2.3:a:sap:business_warehouse:755
-
cpe:2.3:a:sap:business_warehouse:756
-
cpe:2.3:a:sap:business_warehouse:757
-
cpe:2.3:a:sap:business_warehouse:758
-
cpe:2.3:a:sap:business_warehouse_virtual_comp:701