SAP Note 3482217

Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation

MediumCVSS 6.1SAP Business Warehouse - Business Planning and Simulation

Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).

CVE(s): CVE-2024-39594 CVE-2024-39595
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products and versions

Product SAP Business Warehouse - Business Planning and Simulation
Versions: SAP_BW 700, SAP_BW 701, SAP_BW 702, SAP_BW 730, SAP_BW 731, SAP_BW 740, SAP_BW 750, SAP_BW 751, SAP_BW 752, SAP_BW 753, SAP_BW 754, SAP_BW 755, SAP_BW 756, SAP_BW 757, SAP_BW 758, SAP_BW_VIRTUAL_COMP 701

Appears in

Patch Days listing this note, newest first.

July 2024MediumCVSS 6.1

SAP note on SAP for Me (SAP login required)