Skip to content
OpenAdvisories
Medium WID-SEC-2024-1551 17 CVEs

SAP Software: Mehrere Schwachstellen

Published Jul 8, 2024 · Updated Jul 8, 2024 · de-DE

Vendor: SAP Product: Software Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, Cross-Site-Scripting (XSS)-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand erzeugen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.

Product

SAP stellt unternehmensweite Lösungen für Geschäftsprozesse wie Buchführung, Vertrieb, Einkauf und Lagerhaltung zur Verfügung.

Vulnerabilities 17

  • High 7.2
    CVE-2024-39597

    [CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce

    In SAP Commerce, a user can misuse the forgotten password functionality to gain access to a Composable Storefront B2B site for which early login and registration is activated, without requiring the merchant to approve the account beforehand. If the site is no…

    SAP SAP Commerce
  • Medium 6.9
    CVE-2024-39593

    [CVE-2024-39593] Information Disclosure vulnerability in SAP Landscape Management

    SAP Landscape Management allows an authenticated user to read confidential data disclosed by the REST Provider Definition response. Successful exploitation can cause high impact on confidentiality of the managed entities.

    SAP SAP Landscape Management
  • Medium 6.1
    CVE-2024-34685

    [CVE-2024-34685] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Knowledge Management XMLEditor

    Due to weak encoding of user-controlled input in SAP NetWeaver Knowledge Management XMLEditor which allows malicious scripts can be executed in the application, potentially leading to a Cross-Site Scripting (XSS) vulnerability. This has no impact on the avail…

    SAP SAP NetWeaver Knowledge Management XMLEditor
  • Medium 6.1
    CVE-2024-37173

    [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)

    Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the a…

    SAP SAP CRM (WebClient UI)
  • Medium 6.1
    CVE-2024-37174

    [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)

    Custom CSS support option in SAP CRM WebClient UI does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting vulnerability. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the appl…

    SAP SAP CRM (WebClient UI)
  • Medium 6.1
    CVE-2024-39594

    [CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation

    SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause low impact on the …

    SAP SAP Business Warehouse - Business Planning and Simulation
  • Medium 5.4
    CVE-2024-37172

    [CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)

    SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality and availability but there is no impact on t…

    SAP SAP S/4HANA Finance (Advanced Payment Management)
  • Medium 5.4
    CVE-2024-39595

    [CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Business Warehouse - Business Planning and Simulation

    SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site Scripting (XSS) vulnerability. This vulnerability allows users to modify website content and on successfu…

    SAP SAP Business Warehouse - Business Planning and Simulation
  • Medium 5.0
    CVE-2024-34689

    [CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services)

    WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impa…

    SAP SAP Business Workflow (WebFlow Services)
  • Medium 5.0
    CVE-2024-37171

    [CVE-2024-37171] Server-Side Request Forgery (SSRF) in SAP Transportation Management (Collaboration Portal)

    SAP Transportation Management (Collaboration Portal) allows an attacker with non-administrative privileges to send a crafted request from a vulnerable web application. This will trigger the application handler to send a request to an unintended service, which…

    SAP SAP Transportation Management (Collaboration Portal)
  • Medium 5.0
    CVE-2024-39598

    [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)

    SAP CRM (WebClient UI Framework) allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on int…

    SAP SAP CRM (WebClient UI)
  • Medium 5.0
    CVE-2024-39600

    [CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for Windows

    Under certain conditions, the memory of SAP GUI for Windows contains the password used to log on to an SAP system, which might allow an attacker to get hold of the password and impersonate the affected user. As a result, it has a high impact on the confidenti…

    SAP SAP GUI for Windows Windows
  • Medium 4.7
    CVE-2024-39599

    [CVE-2024-39599] Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform

    Due to a Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform, a developer can bypass the configured malware scanner API because of a programming error. This leads to a low impact on the application's confidentiality, in…

    SAP SAP NetWeaver Application Server for ABAP and ABAP Platform
  • Medium 4.3
    CVE-2024-37175

    [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)

    SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to access some sensitive information.

    SAP SAP CRM (WebClient UI)
  • Medium 4.3
    CVE-2024-39596

    [CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

    Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application.

    SAP SAP Enable Now
  • Medium 4.1
    CVE-2024-37180

    [CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

    Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote-enabled function module with no further authorization which would otherwise be restricted, the function can be used to read non-sensitive …

    SAP SAP NetWeaver Application Server for ABAP and ABAP Platform
  • Low 3.3
    CVE-2024-34692

    [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

    Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploita…

    SAP SAP Enable Now

Revision history

  1. #1

    Initiale Fassung

References