VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 11, 2024· Updated Jun 17, 2026

CVE-2024-34683

CVE-2024-34683

Description

An authenticated attacker can upload malicious file to SAP Document Builder service. When the victim accesses this file, the attacker is allowed to access, modify, or make the related information unavailable in the victim’s browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • SAP/Document Buildercpe-rescue15 versions
    S4CORE 100+ 14 more
    • (no CPE)range: S4CORE 100
    • cpe:2.3:a:sap:document_builder:101:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:103:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:104:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:105:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:106:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:107:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:108:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:746:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:747:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:748:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:s4core_100:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:s4fnd_102:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:document_builder:sap_bs_fnd_702:*:*:*:*:*:*:*
  • SAP/Document Builder servicellm-create

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.