SAP Note 3485284
XML injection in SAP BEx Web Java Runtime Export Web Service
HighCVSS 8.2SAP BEx Web Java Runtime Export Web Service
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2024-42374
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Affected products and versions
- Product SAP BEx Web Java Runtime Export Web Service
Versions: BI-BASE-E 7.5, BI-BASE-B 7.5, BI-IBC 7.5, BI-BASE-S 7.5, BIWEBAPP 7.5
Appears in
Patch Days listing this note, newest first.
- August 2024HighCVSS 8.2