VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-39594

CVE-2024-39594

Description

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause low impact on the confidentiality and integrity of the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • SAP/Business Warehouse16 versions
    cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:756:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:757:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:758:*:*:*:*:*:*:*
    • (no CPE)
  • SAP/Business Warehouse Virtual Comp
    cpe:2.3:a:sap:business_warehouse_virtual_comp:701:*:*:*:*:*:*:*
  • SAP/Sap Business Warehouse Business Planning And Simulationv5
    Range: SAP_BW 700
  • SAP/Business Planning and Simulationllm-create

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.