CVE-2024-34689CWE-918

[CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services)

Medium · published July 9, 2024

CVSS v3.1
5.0
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

WebFlow Services of SAP Business Workflow allows

an authenticated attacker to enumerate accessible HTTP endpoints in the

internal network by specially crafting HTTP requests. On successful

exploitation this can result in information disclosure. It has no impact on

integrity and availability of the application.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.7th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-07-09T04:18Z
EPSS history
Timeline
  • 09 JUL 04:18Z
    [CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services)
    cvelistv5