Skip to content
OpenAdvisories
High WID-SEC-2024-3093 12 CVEs

SAP Software: Mehrere Schwachstellen

Published Oct 7, 2024 · Updated Oct 7, 2024 · de-DE

Vendor: SAP Product: Software Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen und einen Denial-of-Service-Zustand zu erzeugen.

Product

SAP stellt unternehmensweite Lösungen für Geschäftsprozesse wie Buchführung, Vertrieb, Einkauf und Lagerhaltung zur Verfügung.

Vulnerabilities 12

  • Critical 9.8
    CVE-2024-41730 EPSS 76%

    Missing Authentication check in SAP BusinessObjects Business Intelligence Platform

    In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can fully compromise the system resulting in High impact on conf…

    SAP SAP BusinessObjects Business Intelligence Platform
  • High 8.8
    CVE-2022-23302 EPSS 64%

    Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

    JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a Top…

    Apache Software Foundation Apache Log4j 1.x druid apache-log4j1.2 Debian Ubuntu Wolfi Maven
  • High 7.7
    CVE-2024-37179

    Insecure File Operations vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence)

    SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to the Web Intelligence Reporting Server to download any file from the machine hosting the service, causing high impact on confidentiality of t…

    SAP SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
  • High 7.7
    CVE-2024-39592

    [CVE-2024-39592] Missing Authorization check in SAP PDCE

    Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This allows an attacker to read sensitive information causing high impact on the confidentiality of the application.

    SAP SAP PDCE
  • Medium 6.0
    CVE-2024-45283

    Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)

    SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password when creating an RFC destination. After successful exploitation, an attacker can read the sensitive information but ca…

    SAP SAP NetWeaver AS for Java (Destination Service)
  • Medium 5.4
    CVE-2024-45278

    Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice

    SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.

    SAP SAP Commerce (Backoffice)
  • Medium 5.4
    CVE-2024-47594

    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC)

    SAP NetWeaver Enterprise Portal (KMC) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability in KMC servlet. An attacker could craft a script and trick the user into clicking it. When a victim who is registered on…

    SAP SAP NetWeaver Enterprise Portal (KMC)
  • Medium 4.3
    CVE-2024-41729

    Information Disclosure vulnerability in the SAP NetWeaver BW (BEx Analyzer)

    Due to missing authorization checks, SAP BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confiden…

    SAP SAP NetWeaver BW (BEx Analyzer)
  • Medium 4.3
    CVE-2024-42373

    Missing Authorization Check in SAP Student Life Cycle Management (SLcM)

    SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to delete non-sensitive report variants tha…

    SAP SAP Student Life Cycle Management (SLcM)
  • Medium 4.3
    CVE-2024-45277

    Prototype Pollution vulnerability in SAP HANA Client

    The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability allowing an attacker to add arbitrary properties to global object prototypes. This is due to improper user input sanitation when using the …

    SAP SAP HANA Client @sap/hana-client npm
  • Medium 4.3
    CVE-2024-45282

    HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)

    Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The property of an OData entity representing assumably immutable method is not protected against external modifications lea…

    SAP SAP S/4 HANA (Manage Bank Statements)
  • Medium 4.1
    CVE-2024-37180

    [CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

    Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote-enabled function module with no further authorization which would otherwise be restricted, the function can be used to read non-sensitive …

    SAP SAP NetWeaver Application Server for ABAP and ABAP Platform

Revision history

  1. #1

    Initiale Fassung

References