VYPR
← All advisories
High severity8.2NVD Advisory· Published Aug 13, 2024· Updated Jun 17, 2026

CVE-2024-42374

CVE-2024-42374

Description

BEx Web Java Runtime Export Web Service does not sufficiently validate an XML document accepted from an untrusted source. An attacker can retrieve information from the SAP ADS system and exhaust the number of XMLForm service which makes the SAP ADS rendering (PDF creation) unavailable. This affects the confidentiality and availability of the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • SAP/Sap Bex Web Java Runtime Export Web Servicellm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: BI-BASE-E 7.5
  • SAP/SAP ADSllm-create
  • SAP/Bex Web Java Runtime Export Web Service5 versions
    cpe:2.3:a:sap:bex_web_java_runtime_export_web_service:bi-base-b_7.5:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:bex_web_java_runtime_export_web_service:bi-base-b_7.5:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bex_web_java_runtime_export_web_service:bi-base-e_7.5:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bex_web_java_runtime_export_web_service:bi-base-s_7.5:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bex_web_java_runtime_export_web_service:bi-ibc_7.5:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:bex_web_java_runtime_export_web_service:biwebapp_7.5:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.