VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-39595

CVE-2024-39595

Description

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability allows users to modify website content and on successful exploitation, an attacker can cause low impact to the confidentiality and integrity of the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • SAP/Business Warehouse16 versions
    cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:756:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:757:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:business_warehouse:758:*:*:*:*:*:*:*
    • (no CPE)
  • SAP/Business Warehouse Virtual Comp
    cpe:2.3:a:sap:business_warehouse_virtual_comp:701:*:*:*:*:*:*:*
  • SAP/Sap Business Warehouse Business Planning And Simulationv5
    Range: SAP_BW 700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.