Medium severity4.3NVD Advisory· Published Aug 13, 2024· Updated Jun 17, 2026
CVE-2024-39591
CVE-2024-39591
Description
SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:a:sap:document_builder:s4fnd_102:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:sap:document_builder:s4fnd_102:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:s4fnd_103:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:s4fnd_104:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:s4fnd_105:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:s4fnd_106:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:s4fnd_107:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:s4fnd_108:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:sap_bs_fnd_702:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:sap_bs_fnd_731:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:sap_bs_fnd_746:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:sap_bs_fnd_747:*:*:*:*:*:*:*
- cpe:2.3:a:sap:document_builder:sap_bs_fnd_748:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: S4FND 102
Patches
Vulnerability mechanics
References
2- url.sap/sapsecuritypatchdaynvdVendor Advisory
- me.sap.com/notes/3477423nvdPermissions Required
News mentions
0No linked articles in our index yet.