Vulnerability Details CVE-2024-39595
SAP Business Warehouse - Business Planning and
Simulation application does not sufficiently encode user-controlled inputs,
resulting in Stored Cross-Site Scripting (XSS) vulnerability. This
vulnerability allows users to modify website content and on successful
exploitation, an attacker can cause low impact to the confidentiality and
integrity of the application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.8%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2024-39595
-
cpe:2.3:a:sap:business_warehouse:700
-
cpe:2.3:a:sap:business_warehouse:701
-
cpe:2.3:a:sap:business_warehouse:702
-
cpe:2.3:a:sap:business_warehouse:730
-
cpe:2.3:a:sap:business_warehouse:731
-
cpe:2.3:a:sap:business_warehouse:740
-
cpe:2.3:a:sap:business_warehouse:750
-
cpe:2.3:a:sap:business_warehouse:751
-
cpe:2.3:a:sap:business_warehouse:752
-
cpe:2.3:a:sap:business_warehouse:753
-
cpe:2.3:a:sap:business_warehouse:754
-
cpe:2.3:a:sap:business_warehouse:755
-
cpe:2.3:a:sap:business_warehouse:756
-
cpe:2.3:a:sap:business_warehouse:757
-
cpe:2.3:a:sap:business_warehouse:758
-
cpe:2.3:a:sap:business_warehouse_virtual_comp:701