CVE-2024-34692CWE-434

[CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

Low · published July 9, 2024

CVSS v3.1
3.3
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

Due to missing verification of file type or

content, SAP Enable Now allows an authenticated attacker to upload arbitrary

files. These files include executables which might be downloaded and executed

by the user which could host malware. On successful exploitation an attacker

can cause limited impact on confidentiality and Integrity of the application.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-07-09T04:43Z
EPSS history
Timeline
  • 09 JUL 04:43Z
    [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now
    cvelistv5