medium6.1
CVE-2024-39594
SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Sc…
Impact
SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause low impact on the confidentiality and integrity of the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Business Warehouse | Versions 700, 701, 702, 730, 731, 740 |
| Sap | Business Warehouse Virtual Comp | Version 701 |