CVE-2024-39595CWE-79

[CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation

Medium · published July 9, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
14.2
In the wild
Unconfirmed
What it is

SAP Business Warehouse - Business Planning and

Simulation application does not sufficiently encode user-controlled inputs,

resulting in Stored Cross-Site Scripting (XSS) vulnerability. This

vulnerability allows users to modify website content and on successful

exploitation, an attacker can cause low impact to the confidentiality and

integrity of the application.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-07-09T04:13Z
EPSS history
Timeline
  • 09 JUL 04:13Z
    [CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation
    cvelistv5